CVE-2023-7028_lab

Implementation and exploitation of CVE-2023-7028 account takeover vulnerability related to GO-TO CVE weekly articles of the 11th week.

This repository contains a Docker setup and a Python script to test the CVE-2023-7028 vulnerability in GitLab. The provided script automates the exploitation process.

Prerequisites

• Docker and Docker Compose installed on your system.
• Basic knowledge of Docker and Python.

Setup Instructions

1. Install Docker

If Docker is not installed on your system, install it using the following commands:

sudo apt-get update
sudo apt-get install docker-ce docker-ce-cli containerd.io
sudo apt-get install docker-compose

2. Starting the GitLab container:

following command

cd CVE-2023-7028
docker-compose up -d

3. Configure GitLab

Visit http://your-server-ip in your browser and complete the initial GitLab setup.

4. Run the Exploit Script

running python-file or open this link --> https://github.com/Vozec/CVE-2023-7028