dnrops
/
metasploit-framework
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Apply suggestions from code review 

Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com>
This commit is contained in:
Heyder Andrade 2022-12-04 12:13:50 +01:00 committed by GitHub
parent 704cee436b
commit 5c3ac339d0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
documentation/modules/exploit/multi/http/gitlab_github_import_rce_cve_2022_2992.md
View File

@ -121,7 +121,7 @@ The local port to listen on. This is the port to be used when creating the tunne
## Scenarios
### Doker container running Gitlab 15.3.1
### Docker container running Gitlab 15.3.1
```
msf6 exploit(multi/http/gitlab_github_import_rce_cve_2022_2992) > options

4
lib/msf/core/exploit/remote/http/gitlab/access_tokens.rb
View File

@ -5,7 +5,7 @@ module Msf::Exploit::Remote::HTTP::Gitlab::AccessTokens
# Create Gitlab access access token
#
# @return [String,nil] Gitlab personal access token if created, nil otherwise
def gitlab_create_access_token
def gitlab_create_personal_access_token
res = send_request_cgi({
'method' => 'POST',
'uri' => normalize_uri(target_uri.path, '/-/profile/personal_access_tokens'),
@ -33,7 +33,7 @@ module Msf::Exploit::Remote::HTTP::Gitlab::AccessTokens
# Revoke Gitlab personal access token
#
# @return [nil,GitLabClientError] nil if revoke, Msf::Exploit::Remote::HTTP::Gitlab::GitLabClientError otherwise
def gitlab_revoke_access_token(api_token)
def gitlab_revoke_personal_access_token(personal_access_token)
res = send_request_cgi({
'method' => 'DELETE',
'uri' => normalize_uri(target_uri.path, '/api/v4/personal_access_tokens/self'),

4
lib/msf/core/exploit/remote/http/gitlab/import.rb
View File

@ -4,8 +4,8 @@
module Msf::Exploit::Remote::HTTP::Gitlab::Import
# Import a repository from a remote URL
#
# @return [String,nil] Import ID if succefull enqueue, nil otherwise
def gitlab_import_github_repo(group_name, github_hostname, api_token)
# @return [String,nil] Import ID if successfully enqueued, nil otherwise
def gitlab_import_github_repo(group_name:, github_hostname:, api_token:)
res = send_request_cgi({
'method' => 'POST',
'uri' => normalize_uri(target_uri.path, '/api/v4/import/github'),