Implementation and exploitation of CVE-2023-7028 account takeover vulnerability related to GO-TO CVE weekly articles of the 11th week.# CVE-2023-7028_lab
Implementation and exploitation of CVE-2023-7028 account takeover vulnerability related to GO-TO CVE weekly articles of the 11th week.
This repository contains a Docker setup and a Python script to test the CVE-2023-7028 vulnerability in GitLab. The provided script automates the exploitation process.
## Prerequisites
- Docker and Docker Compose installed on your system.
- Basic knowledge of Docker and Python.
## Setup Instructions
### 1. Install Docker
If Docker is not installed on your system, install it using the following commands:
```sh
sudo apt-get update
sudo apt-get install docker-ce docker-ce-cli containerd.io
sudo apt-get install docker-compose
```
#### 2. Starting the GitLab container:
following command
```sh
cd CVE-2023-7028
docker-compose up -d
```
### 3. Configure GitLab
Visit http://your-server-ip in your browser and complete the initial GitLab setup.
### 4. Run the Exploit Script
running python-file or open this link --> https://github.com/Vozec/CVE-2023-7028
[4.0K] /data/pocs/4ef0f1aca0d51267616341dce837cf355d7a55f5
├── [ 303] docker-compose.yml
├── [8.3K] exploit.py
└── [1022] README.md
0 directories, 3 files