GitLab CVE-2023-7028

Walkthrough summary

GitLab CVE-2023-7028 TryHackMe walkthrough with 4 answered prompts and lab methodology notes.

Sample prompts covered

• What is the name of the field that is sent with a password reset request to prevent CSRF attacks?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the HTTP method used while sending password reset requests in GitLab?
  Open the walkthrough page to inspect the full answer and command flow.
• Per the above code, what is the API endpoint for getting an updated authenticity token?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the flag value after successfully sending password reset mail through attack.py?
  Open the walkthrough page to inspect the full answer and command flow.