Real World GitLab Account Take Over

New target, this time it’s a company that provides VoIP solutions. The target has some serious clients like government organizations, banks and telecom providers. The company asked for an external engagement and the scope was pretty much every internet asset the company own.

The first day was about the reconnaissance on the target. To read more about some of the recon methodology I use, read this article. This time, the attack surface is not that big and the …

account asset banks bug bounty clients cybersecurity engagement external gitlab government hacking infosec internet organizations own real reconnaissance red team scope serious solutions target telecom telecom providers the company voip world