domains / families / security / gitlab-public-recon

gitlab-public-recon

separate

Mine GitLab for secrets, CI tokens when subdomain found.

When to use

• Target has a `gitlab.` subdomain or self-hosted GitLab instance.
• crt.sh reveals `gitlab.target.com` in certificates.
• After `subdomain-enumeration` discovers GitLab hosts.
• After `js-secrets-extraction` finds GitLab CI/CD references.
• Target is a government agency or large enterprise (common self-hosted GitLab users).

Skill page

Source