gitlabrat 1.1__tar.gz → 1.3__tar.gz

{gitlabrat-1.1 → gitlabrat-1.3}/.gitignore

@@ -183,7 +183,7 @@ cython_debug/
 #  that can be found at https://github.com/github/gitignore/blob/main/Global/VisualStudioCode.gitignore
 #  and can be added to the global gitignore or merged into this file. However, if you prefer, 
 #  you could uncomment the following to ignore the entire vscode folder
-# .vscode/
+.vscode/
 
 # Ruff stuff:
 .ruff_cache/

gitlabrat-1.3/PKG-INFO

@@ -0,0 +1,59 @@
+Metadata-Version: 2.4
+Name: gitlabrat
+Version: 1.3
+Summary: LabRat: GitLab exploitation orchestrator
+Project-URL: Homepage, https://github.com/JChamblee99/Labrat
+Project-URL: Repository, https://github.com/JChamblee99/Labrat.git
+Project-URL: Issues, https://github.com/JChamblee99/Labrt/issues
+Author-email: John Chamblee <conway.py@proton.farm>
+License: GPL-3.0
+License-File: LICENSE
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: GNU General Public License v3 (GPLv3)
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Requires-Python: >=3.8
+Requires-Dist: beautifulsoup4>=4.9.0
+Requires-Dist: gitpython>=3.1.0
+Requires-Dist: python-gitlab>=3.0.0
+Requires-Dist: requests>=2.25.0
+Description-Content-Type: text/markdown
+
+<div align="center">
+
+# Labrat
+
+**Living rent-free in the walls of your GitLab.**
+
+[![PyPI - Version](https://img.shields.io/pypi/v/gitlabrat)](https://pypi.org/project/gitlabrat/)
+[![PyPI - Downloads](https://img.shields.io/pypi/dm/gitlabrat)](https://pypi.org/project/gitlabrat/)
+[![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](https://www.gnu.org/licenses/gpl-3.0)
+[![GitHub last commit](https://img.shields.io/github/last-commit/JChamblee99/LabRat)](https://github.com/JChamblee99/LabRat/commits/main)
+
+</div>
+
+---
+
+## Overview
+
+Labrat automates workflows for gaining and maintaining access to GitLab instances and CI/CD pipelines.
+
+## Installation
+
+```bash
+pip install gitlabrat
+```
+
+## Quick Start
+
+```bash
+# Authenticate to a GitLab instance
+labrat auth -t https://gitlab.example.com -u username -p password
+
+# List authenticated agents
+labrat agents ls
+```

gitlabrat-1.3/README.md

@@ -0,0 +1,34 @@
+<div align="center">
+
+# Labrat
+
+**Living rent-free in the walls of your GitLab.**
+
+[![PyPI - Version](https://img.shields.io/pypi/v/gitlabrat)](https://pypi.org/project/gitlabrat/)
+[![PyPI - Downloads](https://img.shields.io/pypi/dm/gitlabrat)](https://pypi.org/project/gitlabrat/)
+[![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](https://www.gnu.org/licenses/gpl-3.0)
+[![GitHub last commit](https://img.shields.io/github/last-commit/JChamblee99/LabRat)](https://github.com/JChamblee99/LabRat/commits/main)
+
+</div>
+
+---
+
+## Overview
+
+Labrat automates workflows for gaining and maintaining access to GitLab instances and CI/CD pipelines.
+
+## Installation
+
+```bash
+pip install gitlabrat
+```
+
+## Quick Start
+
+```bash
+# Authenticate to a GitLab instance
+labrat auth -t https://gitlab.example.com -u username -p password
+
+# List authenticated agents
+labrat agents ls
+```

{gitlabrat-1.1 → gitlabrat-1.3}/labrat/cli/agents.py

@@ -21,7 +21,7 @@ def build_parser(parsers):
 
 def handle_list_args(args):
     # Prepare table
-    headers = ["Host", "ID", "Username", "Name", "Authenticated", "Is Admin", "Is Bot", "Password", "Private Token"]
+    headers = ["Host", "ID", "Username", "Name", "Is Authenticated", "Is Admin", "Is Bot", "Password", "Private Token"]
     data = []
 
     for agent in args.controller.list(args.filter):

{gitlabrat-1.1 → gitlabrat-1.3}/labrat/cli/auth.py

@@ -13,6 +13,7 @@ def build_parser(parsers):
     parser.add_argument("-r", "--re-auth", action="store_true", help="Re-authenticate with stored credentials")
     parser.add_argument("-n", "--token-name", required=False, help="Name for the access token", default="private token")
     parser.add_argument("-s", "--scopes", required=False, help="Comma-separated list of scopes for the access token", default="api,read_repository,write_repository")
+    parser.add_argument("-a", "--access-token", required=False, help="Access token for authentication")
 
     parser.set_defaults(func=handle_args, _parser=parser)
     parser.set_defaults(controller=Auth())
@@ -20,7 +21,7 @@ def build_parser(parsers):
 
 def handle_args(args):
     has_targets = args.target or args.target_file
-    has_credentials = (args.username and args.password) or args.combo_list
+    has_credentials = (args.username and args.password) or args.combo_list or args.access_token
     can_auth = has_targets and has_credentials
 
     if args.re_auth or can_auth:
@@ -53,7 +54,7 @@ def auth(args):
     scopes = args.scopes.split(",") if args.scopes else []
 
     # Iterate over each user and target
-    for agent, err in args.controller.reauth(token_name=args.token_name, token_scopes=scopes, targets=targets, users=[user[0] for user in users]) if args.re_auth else args.controller.auth(targets, users, token_name=args.token_name, token_scopes=scopes, use_ldap=args.use_ldap):
+    for agent, err in args.controller.reauth(token_name=args.token_name, token_scopes=scopes, targets=targets, users=[user[0] for user in users]) if args.re_auth else args.controller.auth(targets, users, token_name=args.token_name, token_scopes=scopes, private_token=args.access_token, use_ldap=args.use_ldap):
         if err:
             print(f"[-] Authentication failed for {agent.label}: {err}")
         else:

gitlabrat-1.3/labrat/cli/groups.py

@@ -0,0 +1,55 @@
+import datetime
+
+import gitlab
+
+from labrat.cli import common
+from labrat.controllers.groups import Groups
+
+def build_parser(parsers):
+    parser = parsers.add_parser("groups", help="Manage GitLab groups")
+    subparsers = parser.add_subparsers(dest="command", required=True)
+
+    list_parser = common.add_filtered_parser(subparsers, "list", handle_list_args, aliases=["ls"], help="List GitLab groups", filter_required=False)
+    list_parser.add_argument("-m", "--min-access-level", required=False, type=int, help="Minimum access level to filter groups", default=0)
+    list_parser.add_argument("-u", "--user", action="append", required=False, help="Filter agent performing action")
+
+    create_token_parser = common.add_filtered_parser(subparsers, "create_token", handle_create_token_args, help="Create an access token", filter_required=True)
+    create_token_parser.add_argument("-l", "--access-level", required=False, type=int, help="Access level for the access token", default=50)
+    create_token_parser.add_argument("-d", "--days", required=False, type=int, help="Number of days until the token expires", default=60)
+    create_token_parser.add_argument("-n", "--token-name", required=False, help="Name for the access token", default="project_bot")
+    create_token_parser.add_argument("-s", "--scopes", required=False, help="Comma-separated list of scopes for the access token", default="api,read_repository,write_repository")
+    create_token_parser.add_argument("-u", "--user", action="append", required=False, help="Filter agent performing action")
+
+
+    parser.set_defaults(controller=Groups())
+    return subparsers
+
+def handle_list_args(args):
+    headers = ["Host", "ID", "Name", "Access Level", "Agents"]
+    data = []
+
+    for group in args.controller.list(args.filter, args.user):
+        # color each username by that agent's access level (higher -> brighter)
+        usernames = []
+        for agent in group.agents:
+            colored_username = common.color_access_level(agent.access_level, f"{agent.username} ({agent.access_level})")
+            usernames.append(colored_username)
+        
+        # Add group information to data table
+        data.append([
+            group.host,
+            group.id,
+            group.name,
+            f"{group.access_level} ({gitlab.const.AccessLevel(group.access_level).name.lower()})",
+            ", ".join(usernames)
+        ])
+
+    common.print_table(headers, data)
+
+def handle_create_token_args(args):
+    expiration = (datetime.datetime.now() + datetime.timedelta(days=args.days)).strftime("%Y-%m-%d")
+    for group, agent, err in args.controller.create_token(args.token_name, args.access_level, args.scopes.split(","), expiration, args.user, args.filter):
+        if err:
+            print(f"[!] Failed to create access token for {group.web_url}: {err}")
+        else:
+            print(f"[+] Successfully created access token for {group.web_url}: {agent.private_token}")

{gitlabrat-1.1 → gitlabrat-1.3}/labrat/controllers/agents.py

@@ -41,7 +41,7 @@ class Agents:
                 continue
             
             try:
-                agent.add_ssh_key(title, key)
+                agent.gitlab.user.keys.create({'title': title, 'key': key})
                 yield agent, None
             except Exception as e:
                 yield agent, e

{gitlabrat-1.1 → gitlabrat-1.3}/labrat/controllers/auth.py

@@ -6,7 +6,7 @@ class Auth:
     def __init__(self):
         self.config = Config()
 
-    def auth(self, targets, users, token_name, token_scopes, use_ldap=False):
+    def auth(self, targets, users, token_name, token_scopes, private_token, use_ldap=False):
         """Authenticate and create a PAT for each user on each target.
         
         Keyword arguments:
@@ -19,10 +19,14 @@ class Auth:
 
         for username, password in users:
             for target in targets:
-                agent = Agent(target, use_ldap, username, password)
                 try:
-                    agent.login()
-                    agent.auth(private_token=agent.create_pat(token_name, token_scopes))
+                    if private_token:
+                        agent = Agent(url=target, username=username, private_token=private_token)
+                    else:
+                        agent = Agent(url=target, username=username, password=password, use_ldap=use_ldap)
+                        agent.login()
+                        agent.auth(private_token=agent.create_pat(token_name, token_scopes))
+
                     self.config[agent.section] = agent.to_dict()
                     yield agent, None
                 except Exception as e:

gitlabrat-1.3/labrat/controllers/groups.py

@@ -0,0 +1,81 @@
+import copy
+
+from labrat.core.agent import Agent
+from labrat.core.config import Config
+from labrat.core.utils import obj_filter
+
+class Groups:
+    def __init__(self):
+        self.config = Config(authed_only=True)
+
+    def list(self, filter=None, agent_filter=None, min_level=0):
+        """List groups accessible by agents.
+
+        Keyword arguments:
+        - filter: Regex filter and field selection passed to `utils.obj_filter()` for group objects
+        - agent_filter: Regex filter and field selection passed to `utils.obj_filter()` for agent objects
+        - min_level: Minimum desired access level for agent to return a group
+        """
+
+        group_map = {}
+        for section, agent in self.config.filter(agent_filter):
+            groups = agent.gitlab.groups.list(all=True)
+            for group in groups:
+                access_level = self.get_group_access_level(agent, group)
+                if access_level < min_level:
+                    continue
+
+                # Agent enrichment with shallow copy
+                agent_copy = copy.copy(agent)
+                agent_copy.access_level = access_level
+
+                # Group enrichment
+                group.host = agent.host
+
+                # Add group and agent to map
+                if group.web_url not in group_map:
+                    group.agents = [agent_copy]
+                    group.access_level = access_level
+                    group_map[group.web_url] = group
+                else:
+                    group_map[group.web_url].agents.append(agent_copy)
+                    group_map[group.web_url].access_level = max(group_map[group.web_url].access_level, access_level)
+
+        return [group for group in group_map.values() if not filter or obj_filter(group, filter)]
+
+    def create_token(self, name, access_level, scopes, expires_at, agent_filter=None, filter=None):
+        """ Create Group Access Tokens.
+        
+        Keyword arguments:
+        - name: Name of the access token.
+        - access_level: Access level of the created PAT.
+        - scopes: List of scopes for the created PAT. (e.g. `['read_repository', 'write_repository']`)
+        - expires_at: ISO format expiration date for the created PAT.
+        - agent_filter: Regex filter and field selection passed to `utils.obj_filter()` for agent objects.
+        - filter: Regex filter and field selection passed to `utils.obj_filter()` for group objects.
+        """
+
+        for group in self.list(filter=filter, agent_filter=agent_filter, min_level=50):
+            agent = group.agents[0]
+
+            try:
+                req = group.access_tokens.create({
+                    'name': name,
+                    'access_level': access_level,
+                    'scopes': scopes,
+                    'expires_at': expires_at
+                })
+
+                section = f"{req.user_id}_{group.id}@{agent.host}"
+                group_agent = Agent(agent.url, username=name, private_token=req.token, section=section)
+                self.config[section] = group_agent.to_dict()
+
+                yield group, group_agent, None
+            except Exception as e:
+                yield group, None, e
+
+    def get_group_access_level(self, agent, group):
+        try:
+            return group.members.get(agent.id).access_level
+        except Exception as e:
+            return 60 if agent.is_admin else 0

{gitlabrat-1.1 → gitlabrat-1.3}/labrat/core/agent.py

@@ -85,9 +85,6 @@ class Agent:
                 return response_json.get("token")
         except ValueError:
             return None
-        
-    def add_ssh_key(self, title, key):
-        self.gitlab.user.keys.create({'title': title, 'key': key})
 
     def to_dict(self):
         return {

{gitlabrat-1.1 → gitlabrat-1.3}/labrat/main.py

@@ -1,6 +1,6 @@
 # labrat/main.py
 import argparse
-from labrat.cli import agents, auth, projects, users
+from labrat.cli import agents, auth, projects, groups, users
 
 def main():
     parser = argparse.ArgumentParser(
@@ -9,7 +9,7 @@ def main():
     )
     subparsers = parser.add_subparsers(dest="command", required=True)
 
-    for command in [agents, auth, projects, users]:
+    for command in [agents, auth, projects, groups, users]:
         command.build_parser(subparsers)
 
     args = parser.parse_args()

{gitlabrat-1.1 → gitlabrat-1.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "gitlabrat"
-version = "1.1"
+version = "1.3"
 description = "LabRat: GitLab exploitation orchestrator"
 readme = "README.md"
 requires-python = ">=3.8"
@@ -13,7 +13,7 @@ authors = [
 ]
 license = {text = "GPL-3.0"}
 classifiers = [
-    "Development Status :: 3 - Alpha",
+    "Development Status :: 4 - Beta",
     "Intended Audience :: Developers",
     "License :: OSI Approved :: GNU General Public License v3 (GPLv3)",
     "Programming Language :: Python :: 3",
@@ -30,9 +30,9 @@ dependencies = [
 ]
 
 [project.urls]
-Homepage = "https://github.com/JChamblee99/LabRat"
-Repository = "https://github.com/JChamblee99/LabRat.git"
-Issues = "https://github.com/JChamblee99/LabRat/issues"
+Homepage = "https://github.com/JChamblee99/Labrat"
+Repository = "https://github.com/JChamblee99/Labrat.git"
+Issues = "https://github.com/JChamblee99/Labrt/issues"
 
 [project.scripts]
 labrat = "labrat.main:main"

gitlabrat-1.1/PKG-INFO

@@ -1,72 +0,0 @@
-Metadata-Version: 2.4
-Name: gitlabrat
-Version: 1.1
-Summary: LabRat: GitLab exploitation orchestrator
-Project-URL: Homepage, https://github.com/JChamblee99/LabRat
-Project-URL: Repository, https://github.com/JChamblee99/LabRat.git
-Project-URL: Issues, https://github.com/JChamblee99/LabRat/issues
-Author-email: John Chamblee <conway.py@proton.farm>
-License: GPL-3.0
-License-File: LICENSE
-Classifier: Development Status :: 3 - Alpha
-Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: GNU General Public License v3 (GPLv3)
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.8
-Classifier: Programming Language :: Python :: 3.9
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Requires-Python: >=3.8
-Requires-Dist: beautifulsoup4>=4.9.0
-Requires-Dist: gitpython>=3.1.0
-Requires-Dist: python-gitlab>=3.0.0
-Requires-Dist: requests>=2.25.0
-Description-Content-Type: text/markdown
-
-# LabRat
-
-LabRat is a GitLab exploitation orchestrator designed for security researchers and penetration testers.
-
-## Features
-
-- **Authentication Management** - Authenticate to GitLab servers and manage access tokens
-- **Project Management** - List, clone, and manipulate GitLab projects
-- **User Management** - Enumerate and create access tokens for GitLab users
-- **Agent Management** - Manage multiple GitLab agents and credentials
-
-## Installation
-
-Install LabRat from PyPI:
-
-```bash
-pip install gitlabrat
-```
-
-## Usage
-
-```bash
-labrat --help
-```
-
-### Commands
-
-- `labrat auth` - Authenticate to GitLab server(s)
-- `labrat agents` - Manage GitLab agents
-- `labrat projects` - Manage GitLab projects
-- `labrat users` - Manage GitLab users
-
-## Requirements
-
-- Python 3.8+
-- python-gitlab
-- GitPython
-- beautifulsoup4
-- requests
-
-## License
-
-GNU General Public License v3.0 (GPL-3.0)
-
-## Author
-
-John Chamblee

gitlabrat-1.1/README.md

@@ -1,47 +0,0 @@
-# LabRat
-
-LabRat is a GitLab exploitation orchestrator designed for security researchers and penetration testers.
-
-## Features
-
-- **Authentication Management** - Authenticate to GitLab servers and manage access tokens
-- **Project Management** - List, clone, and manipulate GitLab projects
-- **User Management** - Enumerate and create access tokens for GitLab users
-- **Agent Management** - Manage multiple GitLab agents and credentials
-
-## Installation
-
-Install LabRat from PyPI:
-
-```bash
-pip install gitlabrat
-```
-
-## Usage
-
-```bash
-labrat --help
-```
-
-### Commands
-
-- `labrat auth` - Authenticate to GitLab server(s)
-- `labrat agents` - Manage GitLab agents
-- `labrat projects` - Manage GitLab projects
-- `labrat users` - Manage GitLab users
-
-## Requirements
-
-- Python 3.8+
-- python-gitlab
-- GitPython
-- beautifulsoup4
-- requests
-
-## License
-
-GNU General Public License v3.0 (GPL-3.0)
-
-## Author
-
-John Chamblee