gitlab-version-nse
Nmap script to guess* a GitLab version.
Usage
https://github.com/righel/gitlab-version-nse
cd gitlab-version-nse
nmap
--script ./gitlab_version.nse [--script-args="showcves"] --script-args-file="/home/user/gitlab-version-nse/gitlab_versions_map.txt"
- use
--script-args="showcves"to get version CVEs via Vulners API.
sample output:
$ nmap REDACTED -p 443 --script ./gitlab_version.nse -script-args="showcves" --script-args-file="/home/user/gitlab-version-nse/gitlab_versions_map.txt"
Starting Nmap 7.80 ( https://nmap.org ) at 2021-11-07 18:39 CET
Nmap scan report for REDACTED
Host is up (0.013s latency).
PORT STATE SERVICE
443/tcp open https
| gitlab_version:
| 14.0.5
| CVE-2021-22237 4.0 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22237
| CVE-2021-22238 3.5 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22238
| CVE-2021-22239 4.0 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22239
| CVE-2021-22241 3.5 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22241
| CVE-2021-22242 3.5 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22242
| CVE-2021-22243 4.0 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-22243
...
Nmap done: 1 IP address (1 host up) scanned in 0.50 seconds
How
Created a dictionary of the webpack static assets manifest hash -> gitlab version. This is not 100% accurate as sometimes different minor versions have the same hash, still gives a good estimate. The list of hashes is automagically updated every day via a github action.
4 Oct 30, 2022
2.1k Dec 30, 2022
2 Nov 02, 2022
29 Dec 17, 2022
7 Jun 14, 2022
26 Dec 30, 2022
5 Sep 16, 2022
4 Sep 23, 2021
2 Mar 03, 2022
21 Aug 15, 2022
4 Aug 10, 2022
1 Oct 18, 2021
1 Feb 02, 2022
20 Dec 20, 2022
2 Jan 07, 2022
1 Dec 31, 2021
332 Jan 01, 2023
2.9k Jan 07, 2023
3 Jun 06, 2021
5 Dec 02, 2021