HouqiyuA

import requests
import json

def test_user_enumeration(base_url, token, start_id=1, end_id=10):
    """
    Test for user enumeration vulnerability by trying sequential user IDs
    :param base_url: Base API URL (e.g., 'http://192.168.126.129:9980')
    :param token: PRIVATE-TOKEN value
    :param start_id: Starting user ID to test
    :param end_id: Ending user ID to test

HouqiyuA

import requests
from urllib.parse import urljoin

# 配置目标地址和请求头
BASE_URL = "http://DEPLOYED_GITLAB_HOST"
ENDPOINT = "/api/v4/user/keys"
HEADERS = {
    "Accept": "application/json",
    "PRIVATE-TOKEN": "YOUR_TOKEN"
}

HouqiyuA

import requests
import json
import time

def test_extended_vulnerabilities():
    base_url = "http://GITLAB_HOST/api/v4/snippets"
    original_token = "7_pwYNpdf9HZAZr1pkEy"  # valid token

    headers = {
        "Accept": "application/json",

HouqiyuA

import requests
import json
import time

def test_idor_vulnerabilities():
    host = "DEPLOYED_GITLAB_HOST"
    port = "DEPLOYED GITLAB_PORT"
    url = f"http://{host}:{port}/api/v4/ci/lint"

    headers = {

HouqiyuA

import requests

url = f"https://petstore3.swagger.io/api/v3/carts"

# Send a GET request to the API to simulate information disclosure
response = requests.get(url)

HouqiyuA

import requests

def test_delete_pet_without_proper_api_key(pet_id, fake_api_key):
 
    url = f"https://petstore3.swagger.io/api/v3/pet/{pet_id}"
    

    headers = {
        'accept': '*/*',
        'api_key': fake_api_key