GitLab 11.4.7 CE Authenticated Remote Code Execution

[giuliom]

Option (1/2) : 2
Traceback (most recent call last):
File "gitlab_RCE.py", line 210, in <module>
namespace_id = soup.find('input', {'name':
AttributeError: 'NoneType' object has no attribute 'get'

Did someone issued this error?

[broscience]

I am having issues running the code and continually get the error shown below :


Option (1/2) : 1
Traceback (most recent call last):
File "gitlab_rce.py", line 188, in <module>
response1 = request.post(gitlab_url+'/projects', data=payload, cookies=cookies, proxies=proxies, headers=headers, verify=False)
File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 581, in post
return self.request('POST', url, data=data, json=json, **kwargs)
File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 533, in request
resp = self.send(prep, **send_kwargs)
File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 646, in send
r = adapter.send(request, **kwargs)
File "/usr/lib/python2.7/dist-packages/requests/adapters.py", line 510, in send
raise ProxyError(e, request=request)


- any nudges? any advice to make this work?

[ayushkumar]

if i try running it with python it shows requests module not found..though i have it installed

[deepesh]

Can you do a poc on gitea 1.7.5 rce
Exploits are available but i am lil trapped