gitlab-enum.py

#!python3
import requests
import sys 
import argparse
import math 
from concurrent.futures import ThreadPoolExecutor


BANNER=r"""
 _____ _____ _____ _       ___  ______   _____ _   _ _   ____  ___
|  __ \_   _|_   _| |     / _ \ | ___ \ |  ___| \ | | | | |  \/  |
| |  \/ | |   | | | |    / /_\ \| |_/ / | |__ |  \| | | | | .  . |
| | __  | |   | | | |    |  _  || ___ \ |  __|| . ` | | | | |\/| |
| |_\ \_| |_  | | | |____| | | || |_/ / | |___| |\  | |_| | |  | |
 \____/\___/  \_/ \_____/\_| |_/\____/  \____/\_| \_/\___/\_|  |_/
                                                                  
                                                                  
"""

parser = argparse.ArgumentParser(prog="gitlab-enum",description="Simple enumeration tools for gitlab users")
parser.add_argument("-v","--verbose", help="increase output verbosity", action="store_true")
parser.add_argument("-q","--quiet", help="Don't show the banner", action="store_true")
parser.add_argument("url", help="Gitlab URL (without PATH)")
parser.add_argument("-u","--users", help="User file", required=True)
parser.add_argument("-t","--threads",type=int, help="Number of threads", default=2)
args = parser.parse_args()


URL = "http://gitlab.inlanefreight.local:8081"
VERBOSE=args.verbose

def load_wordlist(filepath,splitted=1) :
    lists = [] 
    with open(filepath, newline='', mode="r") as f : 
        lines = [w.strip() for w in f.readlines()]
        splitted = min(splitted, len(lines))
        filePerSplit= math.ceil(len(lines)/splitted)
        for i in range(0,splitted) : 
            lists.append(lines[filePerSplit*i:min(len(lines),filePerSplit*(i+1))])
    return lists 

def is_user_exist(user) : 
    res = requests.get(f"{args.url}/users/{user}/exists")
    if VERBOSE : 
        print(f"[NO]{user}")
    return res.json()["exists"]

def test_dataset(users) : 
    for u in users :
        if is_user_exist(u) : 
            print(f"[EXIST] {u}")


user_files = load_wordlist(args.users, args.threads)

if not args.quiet : 
    print(BANNER)
    print(f"Thread number = {args.threads}")
    print(f"User per thread = {len(user_files[0])}")


with ThreadPoolExecutor(max_workers=args.threads) as executor : 
    for i in range(0,args.threads):
        executor.submit(test_dataset,user_files[i])