GCP - Secret Manager Persistence

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

Secret Manager

Pata maelezo zaidi kuhusu Secret Manager katika:

GCP - Secrets Manager Enum

Rotation misuse

Mshambuliaji anaweza kubadilisha siri ili:

• Kuzuia mizunguko ili siri isibadilishwe

• Kufanya mizunguko kuwa nadra zaidi ili siri isibadilishwe

• Kuchapisha ujumbe wa mzunguko kwenye pub/sub tofauti

• Kubadilisha msimbo wa mzunguko unaotekelezwa. Hii inatokea katika huduma tofauti, labda katika Cloud Function, hivyo mshambuliaji atahitaji ufikiaji wa kipaumbele juu ya Cloud Function au huduma nyingine yoyote.

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.