-
Notifications
You must be signed in to change notification settings - Fork 256
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
GITBOOK-536: change request with no subject merged in GitBook
- Loading branch information
1 parent
40dc1f4
commit ad29f74
Showing
6 changed files
with
144 additions
and
12 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
49 changes: 49 additions & 0 deletions
49
pentesting-cloud/gcp-security/gcp-persistence/gcp-compute-persistence.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,49 @@ | ||
| # GCP - Compute Persistence | ||
|
|
||
| <details> | ||
|
|
||
| <summary><strong>Learn AWS hacking from zero to hero with</strong> <a href="https://training.hacktricks.xyz/courses/arte"><strong>htARTE (HackTricks AWS Red Team Expert)</strong></a><strong>!</strong></summary> | ||
|
|
||
| Other ways to support HackTricks: | ||
|
|
||
| * If you want to see your **company advertised in HackTricks** or **download HackTricks in PDF** Check the [**SUBSCRIPTION PLANS**](https://github.com/sponsors/carlospolop)! | ||
| * Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com) | ||
| * Discover [**The PEASS Family**](https://opensea.io/collection/the-peass-family), our collection of exclusive [**NFTs**](https://opensea.io/collection/the-peass-family) | ||
| * **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** me on **Twitter** 🐦 [**@carlospolopm**](https://twitter.com/carlospolopm)**.** | ||
| * **Share your hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) | ||
| * | ||
| * | ||
| *  github repos. | ||
|
|
||
| </details> | ||
|
|
||
| ## Compute | ||
|
|
||
| For more informatoin about Compute and VPC (Networking) check: | ||
|
|
||
| {% content-ref url="../../gcp-pentesting/gcp-services/gcp-compute-instances-enum/" %} | ||
| [gcp-compute-instances-enum](../../gcp-pentesting/gcp-services/gcp-compute-instances-enum/) | ||
| {% endcontent-ref %} | ||
|
|
||
| ### Persistence abusing Instances & backups | ||
|
|
||
| * Backdoor existing VMs | ||
| * Backdoor disk images and snapshots creating new versions | ||
| * Create new accessible instance with a privileged SA | ||
|
|
||
| <details> | ||
|
|
||
| <summary><strong>Learn AWS hacking from zero to hero with</strong> <a href="https://training.hacktricks.xyz/courses/arte"><strong>htARTE (HackTricks AWS Red Team Expert)</strong></a><strong>!</strong></summary> | ||
|
|
||
| Other ways to support HackTricks: | ||
|
|
||
| * If you want to see your **company advertised in HackTricks** or **download HackTricks in PDF** Check the [**SUBSCRIPTION PLANS**](https://github.com/sponsors/carlospolop)! | ||
| * Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com) | ||
| * Discover [**The PEASS Family**](https://opensea.io/collection/the-peass-family), our collection of exclusive [**NFTs**](https://opensea.io/collection/the-peass-family) | ||
| * **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** me on **Twitter** 🐦 [**@carlospolopm**](https://twitter.com/carlospolopm)**.** | ||
| * **Share your hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) | ||
| * | ||
| * | ||
| *  github repos. | ||
|
|
||
| </details> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
53 changes: 53 additions & 0 deletions
53
...curity/gcp-unaunthenticated-enum-and-access/gcp-compute-unauthenticated-enum.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,53 @@ | ||
| # GCP - Compute Unauthenticated Enum | ||
|
|
||
| <details> | ||
|
|
||
| <summary><strong>Learn AWS hacking from zero to hero with</strong> <a href="https://training.hacktricks.xyz/courses/arte"><strong>htARTE (HackTricks AWS Red Team Expert)</strong></a><strong>!</strong></summary> | ||
|
|
||
| Other ways to support HackTricks: | ||
|
|
||
| * If you want to see your **company advertised in HackTricks** or **download HackTricks in PDF** Check the [**SUBSCRIPTION PLANS**](https://github.com/sponsors/carlospolop)! | ||
| * Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com) | ||
| * Discover [**The PEASS Family**](https://opensea.io/collection/the-peass-family), our collection of exclusive [**NFTs**](https://opensea.io/collection/the-peass-family) | ||
| * **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** me on **Twitter** 🐦 [**@carlospolopm**](https://twitter.com/carlospolopm)**.** | ||
| * **Share your hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) | ||
| * | ||
| * | ||
| *  github repos. | ||
|
|
||
| </details> | ||
|
|
||
| ## Compute | ||
|
|
||
| For more information about Compute and VPC (Networking) check: | ||
|
|
||
| {% content-ref url="../../gcp-pentesting/gcp-services/gcp-compute-instances-enum/" %} | ||
| [gcp-compute-instances-enum](../../gcp-pentesting/gcp-services/gcp-compute-instances-enum/) | ||
| {% endcontent-ref %} | ||
|
|
||
| ### SSRF - Server Side Request Forgery | ||
|
|
||
| If a web is **vulnerable to SSRF** and it's possible to **add the metadata header**, an attacker could abuse it to access the SA OAuth token from the metadata endpoint. For more info about SSRF check: | ||
|
|
||
| {% embed url="https://book.hacktricks.xyz/pentesting-web/ssrf-server-side-request-forgery" %} | ||
|
|
||
| ### Vulnerable exposed services | ||
|
|
||
| If a GCP instance has a vulnerable exposed service an attacker could abuse it to compromise it. | ||
|
|
||
| <details> | ||
|
|
||
| <summary><strong>Learn AWS hacking from zero to hero with</strong> <a href="https://training.hacktricks.xyz/courses/arte"><strong>htARTE (HackTricks AWS Red Team Expert)</strong></a><strong>!</strong></summary> | ||
|
|
||
| Other ways to support HackTricks: | ||
|
|
||
| * If you want to see your **company advertised in HackTricks** or **download HackTricks in PDF** Check the [**SUBSCRIPTION PLANS**](https://github.com/sponsors/carlospolop)! | ||
| * Get the [**official PEASS & HackTricks swag**](https://peass.creator-spring.com) | ||
| * Discover [**The PEASS Family**](https://opensea.io/collection/the-peass-family), our collection of exclusive [**NFTs**](https://opensea.io/collection/the-peass-family) | ||
| * **Join the** 💬 [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** me on **Twitter** 🐦 [**@carlospolopm**](https://twitter.com/carlospolopm)**.** | ||
| * **Share your hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) | ||
| * | ||
| * | ||
| *  github repos. | ||
|
|
||
| </details> |