Nmap script to guess* a GitLab version.

gitlab-version-nse

Usage

https://github.com/righel/gitlab-version-nse
cd gitlab-version-nse 
nmap 
   
     --script ./gitlab_version.nse [--script-args="showcves"] --script-args-file="/home/user/gitlab-version-nse/gitlab_versions_map.txt"

use --script-args="showcves" to get version CVEs via Vulners API.

sample output:

$ nmap REDACTED -p 443 --script ./gitlab_version.nse -script-args="showcves" --script-args-file="/home/user/gitlab-version-nse/gitlab_versions_map.txt"
Starting Nmap 7.80 ( https://nmap.org ) at 2021-11-07 18:39 CET
Nmap scan report for REDACTED
Host is up (0.013s latency).

PORT    STATE SERVICE
443/tcp open  https
| gitlab_version: 
|   14.0.5
|     CVE-2021-22237            4.0             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22237
|     CVE-2021-22238            3.5             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22238
|     CVE-2021-22239            4.0             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22239
|     CVE-2021-22241            3.5             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22241
|     CVE-2021-22242            3.5             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22242
|     CVE-2021-22243            4.0             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22243
...
Nmap done: 1 IP address (1 host up) scanned in 0.50 seconds

How

Created a dictionary of the webpack static assets manifest hash -> gitlab version. This is not 100% accurate as sometimes different minor versions have the same hash, still gives a good estimate. The list of hashes is automagically updated every day via a github action.

Nmap script to guess* a GitLab version.

Related tags

Overview

gitlab-version-nse

Usage

How

Owner

Luciano Righetti

An extremely simple package with a single utillity class used for gracefully handling POSIX shutdown signals.

Random Number Generator Analysis With Python

Lock files using python and cmd

It is a tool that looks for a specific username in social networks

Python humanize functions

Analyze metadata of your Python project.

🍰 ConnectMP - An easy and efficient way to share data between Processes in Python.

Dynamic key remapper for Wayland Window System, especially for Sway

A python package containing all the basic functions and classes for python. From simple addition to advanced file encryption.

kawadi is a versatile tool that used as a form of weapon and is used to cut, shape and split wood.

This repository contains scripts that help you validate QR codes.

Make some improvements in the Pizza class and pizzashop file by refactoring.

Python utilities for writing cross-version compatible libraries

A multipurpose python module

🔩 Like builtins, but boltons. 250+ constructs, recipes, and snippets which extend (and rely on nothing but) the Python standard library. Nothing like Michael Bolton.

Password generator

Create C bindings for python automatically with the help of libclang

A python app which aggregates and splits costs from multiple public cloud providers into a csv

Set of utilities for exporting/controlling your robot in Blender

A library from RCTI+ to handle RabbitMQ tasks (connect, send, receive, etc) in Python.