Nmap script to guess* a GitLab version.

gitlab-version-nse

Usage

https://github.com/righel/gitlab-version-nse
cd gitlab-version-nse 
nmap 
   
     --script ./gitlab_version.nse [--script-args="showcves"] --script-args-file="/home/user/gitlab-version-nse/gitlab_versions_map.txt"

use --script-args="showcves" to get version CVEs via Vulners API.

sample output:

$ nmap REDACTED -p 443 --script ./gitlab_version.nse -script-args="showcves" --script-args-file="/home/user/gitlab-version-nse/gitlab_versions_map.txt"
Starting Nmap 7.80 ( https://nmap.org ) at 2021-11-07 18:39 CET
Nmap scan report for REDACTED
Host is up (0.013s latency).

PORT    STATE SERVICE
443/tcp open  https
| gitlab_version: 
|   14.0.5
|     CVE-2021-22237            4.0             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22237
|     CVE-2021-22238            3.5             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22238
|     CVE-2021-22239            4.0             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22239
|     CVE-2021-22241            3.5             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22241
|     CVE-2021-22242            3.5             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22242
|     CVE-2021-22243            4.0             https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22243
...
Nmap done: 1 IP address (1 host up) scanned in 0.50 seconds

How

Created a dictionary of the webpack static assets manifest hash -> gitlab version. This is not 100% accurate as sometimes different minor versions have the same hash, still gives a good estimate. The list of hashes is automagically updated every day via a github action.

Nmap script to guess* a GitLab version.

Related tags

Overview

gitlab-version-nse

Usage

How

Owner

Luciano Righetti

Minimal Windows system information tool written in Python

Set of scripts for some automation during Magic Lantern development

An extremely simple package with a single utillity class used for gracefully handling POSIX shutdown signals.

Parse URLs for DOIs, PubMed identifiers, PMC identifiers, arXiv identifiers, etc.

Customized python validations.

🔩 Like builtins, but boltons. 250+ constructs, recipes, and snippets which extend (and rely on nothing but) the Python standard library. Nothing like Michael Bolton.

This script allows you to retrieve all functions / variables names of a Python code, and the variables values.

A repository containing several general purpose Python scripts to automate daily and common tasks.

The git for the Python Story Utility Package library.

Give you a better view of your Docker registry disk usage.

Handy Tool to check the availability of onion site and to extract the title of submitted onion links.

Python type-checker written in Rust

This code renames subtitle file names to your video files names, so you don't need to rename them manually.

Early version for manipulate Geo localization data trough API REST.

A python package containing all the basic functions and classes for python. From simple addition to advanced file encryption.

Auto-generate /etc/hosts for HackTheBox machines

A functional standard library for Python.

Allows you to canibalize methods from classes effectively implementing trait-oriented programming

Small Python script to parse endlessh's output and print some neat statistics

Run functions in parallel easily, with their results typed correctly!