Skip to content

GitLab Personal Access Token

ID: gitlab-personal-accesstoken

Severity: info

Author: DhiyaneshDK

Tags: file,keys,gitlab,token

id: gitlab-personal-accesstoken
info:
name: GitLab Personal Access Token
author: DhiyaneshDK
severity: info
reference:
- https://github.com/praetorian-inc/noseyparker/blob/main/data/default/rules/gitlab.yml
- https://docs.gitlab.com/ee/user/profile/personal_access_tokens.html
metadata:
verified: true
tags: file,keys,gitlab,token
file:
- extensions:
- all
extractors:
- type: regex
part: body
regex:
- '\b(glpat-[0-9a-zA-Z_-]{20})(?:\b|$)'
# digest: 4a0a00473045022100d55252f01e6e94897d19849e6076129b351fc26853253a864ec6edf3a4fac3c8022058e41fbdde0605fe0df4bd79374fe171180d7c6860edf90fe8a715ff4b7c7293:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "file/keys/gitlab/gitlab-personal-accesstoken.yaml"

View on Github