Forum Discussion

redreturn's avatar
redreturn
Icon for Bronze II rankBronze II
26 days ago
Solved

CVE-2021-22205 (GitLab) – Offensive

Has anyone encountered an issue (or not) with this lab? It seems fairly trivial to create the file using the remote Gitlab instance IP and then use the commands included in the linked attackerkb art...
offensive cyber
  • AtakanBal's avatar
    AtakanBal
    24 days ago

    I just restarted the lab to check, I didn't encounter any problems when I tried to create and upload the file

    I generated the image using the attackerkb article

     

AtakanBal's avatar
AtakanBal
Icon for Bronze III rankBronze III
24 days ago

😆 I think the instance test code in the article just has some weird formatting like markdown for some reason 'file=**[@test](/contributors/test)**.jpeg'   🤔

curl -v -F 'file=<FILE>' http://<IP>/$(openssl rand -hex 8)

this should get 422