Nmap script to guess* a GitLab version.

gitlab-version-nse

Usage

https://github.com/righel/gitlab-version-nse
cd gitlab-version-nse 
nmap 
   
     --script ./gitlab_version.nse [--script-args="showcves"] --script-args-file="/home/user/gitlab-version-nse/gitlab_versions_map.txt"

use --script-args="showcves" to get version CVEs via Vulners API.

sample output:

$ nmap REDACTED -p 443 --script ./gitlab_version.nse -script-args="showcves" --script-args-file="/home/user/gitlab-version-nse/gitlab_versions_map.txt"
Starting Nmap 7.80 ( https://nmap.org ) at 2021-11-07 18:39 CET
Nmap scan report for REDACTED
Host is up (0.013s latency).

PORT    STATE SERVICE
443/tcp open  https
| gitlab_version: 
|   14.0.5
|     CVE-2021-22237            4.0             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22237
|     CVE-2021-22238            3.5             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22238
|     CVE-2021-22239            4.0             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22239
|     CVE-2021-22241            3.5             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22241
|     CVE-2021-22242            3.5             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22242
|     CVE-2021-22243            4.0             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22243
...
Nmap done: 1 IP address (1 host up) scanned in 0.50 seconds

How

Created a dictionary of the webpack static assets manifest hash -> gitlab version. This is not 100% accurate as sometimes different minor versions have the same hash, still gives a good estimate. The list of hashes is automagically updated every day via a github action.

Nmap script to guess* a GitLab version.

Related tags

Overview

gitlab-version-nse

Usage

How

Owner

Luciano Righetti

Utility to add/remove licenses to/from source files

Nmap script to guess* a GitLab version.

MongoDB utility to inflate the contents of small collection to a new larger collection

A simple API that will return a key-value pair of randomly generated UUID

Helpful functions for use alongside the rich Python library.

A program will generate a eth key pair that has the public key that starts with a defined amount of 0

Lark is a parsing toolkit for Python, built with a focus on ergonomics, performance and modularity.

Finds price floor for every single attribute in a given collection

Generate random german words

Python code to divide big numbers

A simple and easy to use collection of random python functions.

A simple package for handling variables in string.

A Python package for floating-point binary fractions. Do math in base 2!

Format Norminette Output!

These scripts look for non-printable unicode characters in all text files in a source tree

Parse URLs for DOIs, PubMed identifiers, PMC identifiers, arXiv identifiers, etc.

An extremely simple package with a single utillity class used for gracefully handling POSIX shutdown signals.

Script to autocompound 3commas BO:SO based on user provided risk factor

MicroMIUI - Script to optimize miui and not only

🌲 A simple BST (Binary Search Tree) generator written in python