GCP - Storage Post Exploitation
Cloud Storage
Kwa maelezo zaidi kuhusu Hifadhi ya Wingu angalia ukurasa huu:
GCP - Storage EnumGive Public Access
Inawezekana kutoa watumiaji wa nje (waliosajiliwa GCP au la) ufikiaji wa maudhui ya ndoo. Hata hivyo, kwa default ndoo itakuwa na chaguo la kuzima kufichua hadharani ndoo:
Ikiwa unajaribu kutoa ACLs kwa bakuli lenye ACLs zilizozimwa utaona kosa hili: ERROR: HTTPError 400: Cannot use ACL API to update bucket policy when uniform bucket-level access is enabled. Read more at https://cloud.google.com/storage/docs/uniform-bucket-level-access
Ili kufikia bakuli wazi kupitia kivinjari, tembelea URL https://<bucket_name>.storage.googleapis.com/
au https://<bucket_name>.storage.googleapis.com/<object_name>
Last updated