gitlabrat 1.2

LabRat: GitLab exploitation orchestrator

LabRat

GitLab exploitation orchestrator.

---

Overview

LabRat automates common GitLab exploitation workflows: credential spraying, token creation, project enumeration, repository cloning, and bulk updates.

Features

• Authentication — Spray credentials or combo lists across GitLab instances with optional LDAP support
• Agent management — Track access tokens and push SSH keys across available agents
• Project operations — Enumerate, clone, create access tokens, and perform procedural updates on repositories
• User enumeration — List users with advanced filtering and create access tokens

Installation

pip install gitlabrat

Requires Python 3.8+

Quick Start

# Authenticate to a GitLab instance
labrat auth -t https://gitlab.example.com -u username -p password

# List authenticated agents
labrat agents ls

Usage

labrat [-h] {agents,auth,projects,users} ...

Dependencies

Package	Purpose
python-gitlab	GitLab API client
GitPython	Git repository operations
BeautifulSoup4	HTML parsing for session auth
Requests	HTTP session management

Disclaimer

This tool is intended for authorized security testing and research only. The author assumes no liability for misuse. Always obtain proper authorization before testing against any system you do not own.

License

GNU General Public License v3.0