0x22bb
/
hacktricks
mirror of https://github.com/carlospolop/hacktricks.git
1
2
Fork 0
Code Releases Activity

GitBook: [#2812] update gcp

This commit is contained in:
CPol 2021-10-27 13:31:42 +00:00 committed by gitbook-bot
parent b150f0adc0
commit 603b6d9604
No known key found for this signature in database
GPG Key ID: 07D2180C7B12D0FF
2 changed files with 27 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
cloud-security/gcp-security/README.md
View File

@ -420,6 +420,10 @@ If you have success creating a new admin account, you can log on to the [Google
Another promising way to **escalate privileges inside the cloud is to enumerate as much sensitive information as possible** from the services that are being used. Here you can find some enumeration recommendations for some GCP services, but more could be used so feel free to submit PRs indicating ways to enumerate more services:
{% hint style="info" %}
Note that you can enumerate most resources with `list` (list items of that type), `describe` (describe parent and children items) and `get-iam-policy` (get policy attached to that specific resource). 
{% endhint %}
{% content-ref url="gcp-compute-enumeration.md" %}
[gcp-compute-enumeration.md](gcp-compute-enumeration.md)
{% endcontent-ref %}

25
cloud-security/gcp-security/gcp-databases-enumeration.md
View File

@ -60,11 +60,32 @@ The Firebase Realtime Database is a cloud-hosted NoSQL database that lets you st
Reduce latency with scalable, secure, and highly available in-memory service for [**Redis**](https://cloud.google.com/sdk/gcloud/reference/redis) and [**Memcached**](https://cloud.google.com/sdk/gcloud/reference/memcache). Learn more.
```
```bash
gcloud memcache instances list --region [region]
# You should try to nnect to the memcache instances to access the data
# You should try to connect to the memcache instances to access the data
gcloud redis instances list --region [region]
gcloud redis instances export gs://my-bucket/my-redis-instance.rdb my-redis-instance --region=us-central1
```
### [Bigquery](https://cloud.google.com/bigquery/docs/bq-command-line-tool)
BigQuery is a fully-managed enterprise data warehouse that helps you manage and analyze your data with built-in features like machine learning, geospatial analysis, and business intelligence. BigQuery’s serverless architecture lets you use SQL queries to answer your organization’s biggest questions with zero infrastructure management. BigQuery’s scalable, distributed analysis engine lets you query terabytes in seconds and petabytes in minutes. [Learn more](https://cloud.google.com/bigquery/docs/introduction).
```bash
bq ls -p #List rojects
bq ls -a #List all datasets
bq ls #List datasets from current project
bq ls <dataset_name> #List tables inside the DB
# Show information
bq show "<proj_name>:<dataset_name>"
bq show "<proj_name>:<dataset_name>.<table_name>"
bq show --encryption_service_account
bq query '<query>' #Query inside the dataset
# Dump the table or dataset
bq extract ds.table gs://mybucket/table.csv
bq extract -m ds.model gs://mybucket/model
```