Gitlab Weak Login Scanner
Web-based configuration, API or administrative interfaces has weak credentials for login process.
Short Info
Level
High
Type
Single Scan
Can be used by
Asset Owner
Estimated Time
10 sec
Scan only one
Domain, Ipv4
Parent Category
Gitlab Weak Login Scanner Detail
Often these applications, once installed, are not properly configured and the default credentials provided for initial authentication and configuration are never changed. These default credentials are well known by penetration testers and, unfortunately, also by malicious attackers, who can use them to gain access to various types of applications.
Try it yourself,
control security posture
control security posture