GitLab Attack Lab

A containerized GitLab pentesting lab for learning and practicing GitLab CI/CD security vulnerabilities with Pipeleek.

Prerequisites

• Docker and Docker Compose v2 (the docker compose CLI plugin subcommand)
• Make

Quick Start

1. Start the Lab

make setup

Time: 5-15 minutes

2. Get Started

Access the lab scenarios and descriptions at http://localhost:7706 — start with Scenario 00, which walks you through logging into GitLab and completing your first flag.

System Requirements

This lab runs multiple heavy services (GitLab, runners, web app, pentester tooling).

• CPU: 4 vCPUs recommended (2 vCPUs minimum, but slower setup and job execution)
• RAM: 8 GB recommended (4 GB minimum, but GitLab may be unstable under load)
• Disk Absolute minimum: 20 GB free