GCP - Storage Persistence

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

Storage

Cloud Storage에 대한 자세한 정보는 다음을 확인하세요:

GCP - Storage Enum

storage.hmacKeys.create

버킷에 대한 지속성을 유지하기 위해 HMAC를 생성할 수 있습니다. 이 기술에 대한 자세한 정보는 여기에서 확인하세요.

# Create key
gsutil hmac create <sa-email>

# Configure gsutil to use it
gsutil config -a

# Use it
gsutil ls gs://[BUCKET_NAME]

Another exploit script for this method can be found here.

Give Public Access

버킷을 공개적으로 접근 가능하게 만드는 것은 버킷에 대한 접근을 유지하는 또 다른 방법입니다. 방법은 다음에서 확인하세요:

GCP - Storage Post Exploitation

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.