gitlabrat 1.2__tar.gz → 1.3__tar.gz

{gitlabrat-1.2 → gitlabrat-1.3}/.gitignore

@@ -183,7 +183,7 @@ cython_debug/
 #  that can be found at https://github.com/github/gitignore/blob/main/Global/VisualStudioCode.gitignore
 #  and can be added to the global gitignore or merged into this file. However, if you prefer, 
 #  you could uncomment the following to ignore the entire vscode folder
-# .vscode/
+.vscode/
 
 # Ruff stuff:
 .ruff_cache/

gitlabrat-1.3/PKG-INFO

@@ -0,0 +1,59 @@
+Metadata-Version: 2.4
+Name: gitlabrat
+Version: 1.3
+Summary: LabRat: GitLab exploitation orchestrator
+Project-URL: Homepage, https://github.com/JChamblee99/Labrat
+Project-URL: Repository, https://github.com/JChamblee99/Labrat.git
+Project-URL: Issues, https://github.com/JChamblee99/Labrt/issues
+Author-email: John Chamblee <conway.py@proton.farm>
+License: GPL-3.0
+License-File: LICENSE
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: GNU General Public License v3 (GPLv3)
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Requires-Python: >=3.8
+Requires-Dist: beautifulsoup4>=4.9.0
+Requires-Dist: gitpython>=3.1.0
+Requires-Dist: python-gitlab>=3.0.0
+Requires-Dist: requests>=2.25.0
+Description-Content-Type: text/markdown
+
+<div align="center">
+
+# Labrat
+
+**Living rent-free in the walls of your GitLab.**
+
+[![PyPI - Version](https://img.shields.io/pypi/v/gitlabrat)](https://pypi.org/project/gitlabrat/)
+[![PyPI - Downloads](https://img.shields.io/pypi/dm/gitlabrat)](https://pypi.org/project/gitlabrat/)
+[![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](https://www.gnu.org/licenses/gpl-3.0)
+[![GitHub last commit](https://img.shields.io/github/last-commit/JChamblee99/LabRat)](https://github.com/JChamblee99/LabRat/commits/main)
+
+</div>
+
+---
+
+## Overview
+
+Labrat automates workflows for gaining and maintaining access to GitLab instances and CI/CD pipelines.
+
+## Installation
+
+```bash
+pip install gitlabrat
+```
+
+## Quick Start
+
+```bash
+# Authenticate to a GitLab instance
+labrat auth -t https://gitlab.example.com -u username -p password
+
+# List authenticated agents
+labrat agents ls
+```

gitlabrat-1.3/README.md

@@ -0,0 +1,34 @@
+<div align="center">
+
+# Labrat
+
+**Living rent-free in the walls of your GitLab.**
+
+[![PyPI - Version](https://img.shields.io/pypi/v/gitlabrat)](https://pypi.org/project/gitlabrat/)
+[![PyPI - Downloads](https://img.shields.io/pypi/dm/gitlabrat)](https://pypi.org/project/gitlabrat/)
+[![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](https://www.gnu.org/licenses/gpl-3.0)
+[![GitHub last commit](https://img.shields.io/github/last-commit/JChamblee99/LabRat)](https://github.com/JChamblee99/LabRat/commits/main)
+
+</div>
+
+---
+
+## Overview
+
+Labrat automates workflows for gaining and maintaining access to GitLab instances and CI/CD pipelines.
+
+## Installation
+
+```bash
+pip install gitlabrat
+```
+
+## Quick Start
+
+```bash
+# Authenticate to a GitLab instance
+labrat auth -t https://gitlab.example.com -u username -p password
+
+# List authenticated agents
+labrat agents ls
+```

{gitlabrat-1.2 → gitlabrat-1.3}/labrat/cli/agents.py

@@ -21,7 +21,7 @@ def build_parser(parsers):
 
 def handle_list_args(args):
     # Prepare table
-    headers = ["Host", "ID", "Username", "Name", "Authenticated", "Is Admin", "Is Bot", "Password", "Private Token"]
+    headers = ["Host", "ID", "Username", "Name", "Is Authenticated", "Is Admin", "Is Bot", "Password", "Private Token"]
     data = []
 
     for agent in args.controller.list(args.filter):

gitlabrat-1.3/labrat/cli/groups.py

@@ -0,0 +1,55 @@
+import datetime
+
+import gitlab
+
+from labrat.cli import common
+from labrat.controllers.groups import Groups
+
+def build_parser(parsers):
+    parser = parsers.add_parser("groups", help="Manage GitLab groups")
+    subparsers = parser.add_subparsers(dest="command", required=True)
+
+    list_parser = common.add_filtered_parser(subparsers, "list", handle_list_args, aliases=["ls"], help="List GitLab groups", filter_required=False)
+    list_parser.add_argument("-m", "--min-access-level", required=False, type=int, help="Minimum access level to filter groups", default=0)
+    list_parser.add_argument("-u", "--user", action="append", required=False, help="Filter agent performing action")
+
+    create_token_parser = common.add_filtered_parser(subparsers, "create_token", handle_create_token_args, help="Create an access token", filter_required=True)
+    create_token_parser.add_argument("-l", "--access-level", required=False, type=int, help="Access level for the access token", default=50)
+    create_token_parser.add_argument("-d", "--days", required=False, type=int, help="Number of days until the token expires", default=60)
+    create_token_parser.add_argument("-n", "--token-name", required=False, help="Name for the access token", default="project_bot")
+    create_token_parser.add_argument("-s", "--scopes", required=False, help="Comma-separated list of scopes for the access token", default="api,read_repository,write_repository")
+    create_token_parser.add_argument("-u", "--user", action="append", required=False, help="Filter agent performing action")
+
+
+    parser.set_defaults(controller=Groups())
+    return subparsers
+
+def handle_list_args(args):
+    headers = ["Host", "ID", "Name", "Access Level", "Agents"]
+    data = []
+
+    for group in args.controller.list(args.filter, args.user):
+        # color each username by that agent's access level (higher -> brighter)
+        usernames = []
+        for agent in group.agents:
+            colored_username = common.color_access_level(agent.access_level, f"{agent.username} ({agent.access_level})")
+            usernames.append(colored_username)
+        
+        # Add group information to data table
+        data.append([
+            group.host,
+            group.id,
+            group.name,
+            f"{group.access_level} ({gitlab.const.AccessLevel(group.access_level).name.lower()})",
+            ", ".join(usernames)
+        ])
+
+    common.print_table(headers, data)
+
+def handle_create_token_args(args):
+    expiration = (datetime.datetime.now() + datetime.timedelta(days=args.days)).strftime("%Y-%m-%d")
+    for group, agent, err in args.controller.create_token(args.token_name, args.access_level, args.scopes.split(","), expiration, args.user, args.filter):
+        if err:
+            print(f"[!] Failed to create access token for {group.web_url}: {err}")
+        else:
+            print(f"[+] Successfully created access token for {group.web_url}: {agent.private_token}")

gitlabrat-1.3/labrat/controllers/groups.py

@@ -0,0 +1,81 @@
+import copy
+
+from labrat.core.agent import Agent
+from labrat.core.config import Config
+from labrat.core.utils import obj_filter
+
+class Groups:
+    def __init__(self):
+        self.config = Config(authed_only=True)
+
+    def list(self, filter=None, agent_filter=None, min_level=0):
+        """List groups accessible by agents.
+
+        Keyword arguments:
+        - filter: Regex filter and field selection passed to `utils.obj_filter()` for group objects
+        - agent_filter: Regex filter and field selection passed to `utils.obj_filter()` for agent objects
+        - min_level: Minimum desired access level for agent to return a group
+        """
+
+        group_map = {}
+        for section, agent in self.config.filter(agent_filter):
+            groups = agent.gitlab.groups.list(all=True)
+            for group in groups:
+                access_level = self.get_group_access_level(agent, group)
+                if access_level < min_level:
+                    continue
+
+                # Agent enrichment with shallow copy
+                agent_copy = copy.copy(agent)
+                agent_copy.access_level = access_level
+
+                # Group enrichment
+                group.host = agent.host
+
+                # Add group and agent to map
+                if group.web_url not in group_map:
+                    group.agents = [agent_copy]
+                    group.access_level = access_level
+                    group_map[group.web_url] = group
+                else:
+                    group_map[group.web_url].agents.append(agent_copy)
+                    group_map[group.web_url].access_level = max(group_map[group.web_url].access_level, access_level)
+
+        return [group for group in group_map.values() if not filter or obj_filter(group, filter)]
+
+    def create_token(self, name, access_level, scopes, expires_at, agent_filter=None, filter=None):
+        """ Create Group Access Tokens.
+        
+        Keyword arguments:
+        - name: Name of the access token.
+        - access_level: Access level of the created PAT.
+        - scopes: List of scopes for the created PAT. (e.g. `['read_repository', 'write_repository']`)
+        - expires_at: ISO format expiration date for the created PAT.
+        - agent_filter: Regex filter and field selection passed to `utils.obj_filter()` for agent objects.
+        - filter: Regex filter and field selection passed to `utils.obj_filter()` for group objects.
+        """
+
+        for group in self.list(filter=filter, agent_filter=agent_filter, min_level=50):
+            agent = group.agents[0]
+
+            try:
+                req = group.access_tokens.create({
+                    'name': name,
+                    'access_level': access_level,
+                    'scopes': scopes,
+                    'expires_at': expires_at
+                })
+
+                section = f"{req.user_id}_{group.id}@{agent.host}"
+                group_agent = Agent(agent.url, username=name, private_token=req.token, section=section)
+                self.config[section] = group_agent.to_dict()
+
+                yield group, group_agent, None
+            except Exception as e:
+                yield group, None, e
+
+    def get_group_access_level(self, agent, group):
+        try:
+            return group.members.get(agent.id).access_level
+        except Exception as e:
+            return 60 if agent.is_admin else 0

{gitlabrat-1.2 → gitlabrat-1.3}/labrat/main.py

@@ -1,6 +1,6 @@
 # labrat/main.py
 import argparse
-from labrat.cli import agents, auth, projects, users
+from labrat.cli import agents, auth, projects, groups, users
 
 def main():
     parser = argparse.ArgumentParser(
@@ -9,7 +9,7 @@ def main():
     )
     subparsers = parser.add_subparsers(dest="command", required=True)
 
-    for command in [agents, auth, projects, users]:
+    for command in [agents, auth, projects, groups, users]:
         command.build_parser(subparsers)
 
     args = parser.parse_args()

{gitlabrat-1.2 → gitlabrat-1.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "gitlabrat"
-version = "1.2"
+version = "1.3"
 description = "LabRat: GitLab exploitation orchestrator"
 readme = "README.md"
 requires-python = ">=3.8"
@@ -13,7 +13,7 @@ authors = [
 ]
 license = {text = "GPL-3.0"}
 classifiers = [
-    "Development Status :: 3 - Alpha",
+    "Development Status :: 4 - Beta",
     "Intended Audience :: Developers",
     "License :: OSI Approved :: GNU General Public License v3 (GPLv3)",
     "Programming Language :: Python :: 3",
@@ -30,9 +30,9 @@ dependencies = [
 ]
 
 [project.urls]
-Homepage = "https://github.com/JChamblee99/LabRat"
-Repository = "https://github.com/JChamblee99/LabRat.git"
-Issues = "https://github.com/JChamblee99/LabRat/issues"
+Homepage = "https://github.com/JChamblee99/Labrat"
+Repository = "https://github.com/JChamblee99/Labrat.git"
+Issues = "https://github.com/JChamblee99/Labrt/issues"
 
 [project.scripts]
 labrat = "labrat.main:main"

gitlabrat-1.2/PKG-INFO

@@ -1,91 +0,0 @@
-Metadata-Version: 2.4
-Name: gitlabrat
-Version: 1.2
-Summary: LabRat: GitLab exploitation orchestrator
-Project-URL: Homepage, https://github.com/JChamblee99/LabRat
-Project-URL: Repository, https://github.com/JChamblee99/LabRat.git
-Project-URL: Issues, https://github.com/JChamblee99/LabRat/issues
-Author-email: John Chamblee <conway.py@proton.farm>
-License: GPL-3.0
-License-File: LICENSE
-Classifier: Development Status :: 3 - Alpha
-Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: GNU General Public License v3 (GPLv3)
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.8
-Classifier: Programming Language :: Python :: 3.9
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Requires-Python: >=3.8
-Requires-Dist: beautifulsoup4>=4.9.0
-Requires-Dist: gitpython>=3.1.0
-Requires-Dist: python-gitlab>=3.0.0
-Requires-Dist: requests>=2.25.0
-Description-Content-Type: text/markdown
-
-<div align="center">
-
-# LabRat
-
-**GitLab exploitation orchestrator.**
-
-[![PyPI - Version](https://img.shields.io/pypi/v/gitlabrat)](https://pypi.org/project/gitlabrat/)
-[![PyPI - Downloads](https://img.shields.io/pypi/dm/gitlabrat)](https://pypi.org/project/gitlabrat/)
-[![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](https://www.gnu.org/licenses/gpl-3.0)
-[![GitHub last commit](https://img.shields.io/github/last-commit/JChamblee99/LabRat)](https://github.com/JChamblee99/LabRat/commits/main)
-
-</div>
-
----
-
-## Overview
-
-LabRat automates common GitLab exploitation workflows: credential spraying, token creation, project enumeration, repository cloning, and bulk updates.
-
-## Features
-
-- **Authentication** — Spray credentials or combo lists across GitLab instances with optional LDAP support
-- **Agent management** — Track access tokens and push SSH keys across available agents
-- **Project operations** — Enumerate, clone, create access tokens, and perform procedural updates on repositories
-- **User enumeration** — List users with advanced filtering and create access tokens
-
-## Installation
-
-```bash
-pip install gitlabrat
-```
-
-> Requires **Python 3.8+**
-
-## Quick Start
-
-```bash
-# Authenticate to a GitLab instance
-labrat auth -t https://gitlab.example.com -u username -p password
-
-# List authenticated agents
-labrat agents ls
-```
-
-## Usage
-
-```
-labrat [-h] {agents,auth,projects,users} ...
-```
-
-## Dependencies
-
-| Package | Purpose |
-|---------|---------|
-| [python-gitlab](https://python-gitlab.readthedocs.io/) | GitLab API client |
-| [GitPython](https://gitpython.readthedocs.io/) | Git repository operations |
-| [BeautifulSoup4](https://www.crummy.com/software/BeautifulSoup/) | HTML parsing for session auth |
-| [Requests](https://docs.python-requests.org/) | HTTP session management |
-
-## Disclaimer
-
-This tool is intended for **authorized security testing and research only**. The author assumes no liability for misuse. Always obtain proper authorization before testing against any system you do not own.
-
-## License
-
-[GNU General Public License v3.0](LICENSE)

gitlabrat-1.2/README.md

@@ -1,66 +0,0 @@
-<div align="center">
-
-# LabRat
-
-**GitLab exploitation orchestrator.**
-
-[![PyPI - Version](https://img.shields.io/pypi/v/gitlabrat)](https://pypi.org/project/gitlabrat/)
-[![PyPI - Downloads](https://img.shields.io/pypi/dm/gitlabrat)](https://pypi.org/project/gitlabrat/)
-[![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](https://www.gnu.org/licenses/gpl-3.0)
-[![GitHub last commit](https://img.shields.io/github/last-commit/JChamblee99/LabRat)](https://github.com/JChamblee99/LabRat/commits/main)
-
-</div>
-
----
-
-## Overview
-
-LabRat automates common GitLab exploitation workflows: credential spraying, token creation, project enumeration, repository cloning, and bulk updates.
-
-## Features
-
-- **Authentication** — Spray credentials or combo lists across GitLab instances with optional LDAP support
-- **Agent management** — Track access tokens and push SSH keys across available agents
-- **Project operations** — Enumerate, clone, create access tokens, and perform procedural updates on repositories
-- **User enumeration** — List users with advanced filtering and create access tokens
-
-## Installation
-
-```bash
-pip install gitlabrat
-```
-
-> Requires **Python 3.8+**
-
-## Quick Start
-
-```bash
-# Authenticate to a GitLab instance
-labrat auth -t https://gitlab.example.com -u username -p password
-
-# List authenticated agents
-labrat agents ls
-```
-
-## Usage
-
-```
-labrat [-h] {agents,auth,projects,users} ...
-```
-
-## Dependencies
-
-| Package | Purpose |
-|---------|---------|
-| [python-gitlab](https://python-gitlab.readthedocs.io/) | GitLab API client |
-| [GitPython](https://gitpython.readthedocs.io/) | Git repository operations |
-| [BeautifulSoup4](https://www.crummy.com/software/BeautifulSoup/) | HTML parsing for session auth |
-| [Requests](https://docs.python-requests.org/) | HTTP session management |
-
-## Disclaimer
-
-This tool is intended for **authorized security testing and research only**. The author assumes no liability for misuse. Always obtain proper authorization before testing against any system you do not own.
-
-## License
-
-[GNU General Public License v3.0](LICENSE)