Account Takeover Vulnerability on GitLab CVE-2023-7028
In this video, I will demonstrate how to hack GitLab accounts using a critical vulnerability (CVE-2023-7028) that allows password reset without user interactions. This vulnerability affects all versions of GitLab CE/EE from 16.1 to 16.7.2 and can lead to account takeover and data breach. You will learn how to exploit this vulnerability using a simple HTTP request and how to protect your own GitLab accounts from this attack. You can also read more about this vulnerability in my blog post
Blog: secops.group/u...
The SecOps Group is a globally recognized IT security company having extensive and varied experience in providing cybersecurity consultancy and education services. At The SecOps Group, we believe that security is a continuous process, which has to progress with time and in accordance with the customer needs and constantly evolving threats. Our core business comprises of two units:
1. Consultancy:
Pentesting and Advisory
The SecOps Group are cybersecurity experts offering CREST-accredited security consultancy services.
2. Education:
Pentesting Exams
Through our exams, we provide an authentic and credible certification that is modern, relevant and represents real-life business risks.
For business: secops.group/
Follow us
Twitter: / thesecopsgroup
Instagram: / thesecopsgroupuk
LinkedIn: / secops-group
#infosec #devops #devsecops #information #informationtechnology #cyber #cybersecurity #bugbounty #pentest #pentesting #ethicalhacking
16 янв 2024
