CVE-2023-7028 PoC — GitLab 安全漏洞

Description

Implementation and exploitation of CVE-2023-7028 account takeover vulnerability related to GO-TO CVE weekly articles of the 11th week.

介绍

# CVE-2023-7028_lab
Implementation and exploitation of CVE-2023-7028 account takeover vulnerability related to GO-TO CVE weekly articles of the 11th week.

This repository contains a Docker setup and a Python script to test the CVE-2023-7028 vulnerability in GitLab. The provided script automates the exploitation process.

## Prerequisites

- Docker and Docker Compose installed on your system.
- Basic knowledge of Docker and Python.

## Setup Instructions

### 1. Install Docker

If Docker is not installed on your system, install it using the following commands:

```sh
sudo apt-get update
sudo apt-get install docker-ce docker-ce-cli containerd.io
sudo apt-get install docker-compose
```

#### 2. Starting the GitLab container:

following command

```sh
cd CVE-2023-7028
docker-compose up -d
```
### 3. Configure GitLab
Visit http://your-server-ip in your browser and complete the initial GitLab setup.

### 4. Run the Exploit Script

running python-file or open this link --> https://github.com/Vozec/CVE-2023-7028 

文件快照

备注