POJIA破甲
地图 / Lack of validation before assigning custom domain names leading to abuse of GitLab pages service

Lack of validation before assigning custom domain names leading to abuse of GitLab pages service

其他弱点 / 钓鱼 / #296907

厂商
GitLab
严重程度
低危
赏金
—
弱点
钓鱼
研究员
@badshah_
披露日期
2018-02-01
资产
—
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(3685 字符中的一小部分)
One way to add a custom domain name for GitLab pages is to create a new DNS A record pointing to the IP of GitLab Pages server i.e. `52.167.214.135`. A person who owns the domain name, could then add the domain name in the Pages settings (at `https://gitlab.com/<username>/<repo>/pages`). GitLab …
原文中的代码
import requests
import json
import time

headers = {
    'User-Agent': 'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0',
    'Referer': 'https://dnstrails.com/',
    'Origin': 'https://dnstrails.com',
    'DNT': '1',
}

page_no = 1

while page_no <= 1000:
  params = ( …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 GitLab 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @badshah_ · 版权归作者与 GitLab 所有

同类报告

URL link spoofingSlack · 2020-04-26 · $250Github Account hijack through broken link in developer.twitter.comX / xAI · 2021-02-04Subdomain Takeover on demo.greenhouse.io pointing to unbouncepagesGreenhouse.io · 2020-03-05Domain Takeover [3737signals.com]Basecamp · 2021-08-13Login CSRF : Login Authentication Flaw on https://liberapay.com/Liberapay · 2021-04-05account impersonate through broken linkQIWI · —