Az - Queue Storage

Reading time: 4 minutes

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE) Jifunze na fanya mazoezi ya Azure Hacking: HackTricks Training Azure Red Team Expert (AzRTE)

Support HackTricks

Basic Information

Azure Queue Storage ni huduma katika jukwaa la wingu la Microsoft Azure iliyoundwa kwa ajili ya kupanga ujumbe kati ya vipengele vya programu, ikiwezesha mawasiliano yasiyo ya moja kwa moja na kutenganisha. Inakuwezesha kuhifadhi idadi isiyo na kikomo ya ujumbe, kila mmoja ukiwa na ukubwa wa hadi 64 KB, na inasaidia operesheni kama vile kuunda na kufuta foleni, kuongeza, kupata, kuboresha, na kufuta ujumbe, pamoja na kusimamia metadata na sera za ufikiaji. Ingawa kawaida inashughulikia ujumbe kwa njia ya kwanza kuingia, ya kwanza kutoka (FIFO), FIFO kali haikuhakikishwa.

Enumeration

bash
# You need to know the --account-name of the storage (az storage account list)
az storage queue list --account-name <storage_account> # --auth-mode login

# Queue Metadata
az storage queue metadata show --name <queue_name> --account-name <storage_account> # --auth-mode login

#Get ACL
az storage queue policy list --queue-name <queue_name> --account-name <storage_account> # --auth-mode login

# Get Messages (getting a message deletes it)
az storage message get --queue-name <queue_name> --account-name <storage_account> # --auth-mode login

# Peek Messages
az storage message peek --queue-name <queue_name> --account-name <storage_account> # --auth-mode login

Kuinua Haki

Az - Queue Storage Privesc

Baada ya Kutekeleza

Az - Queue Storage Post Exploitation

Kudumu

Az - Queue Storage Persistence

Marejeo

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE) Jifunze na fanya mazoezi ya Azure Hacking: HackTricks Training Azure Red Team Expert (AzRTE)

Support HackTricks