GCP - App Engine Unauthenticated Enum

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

App Engine

Kwa maelezo zaidi kuhusu App Engine angalia:

GCP - App Engine Enum

Brute Force Subdomains

Kama ilivyotajwa, URL iliyotolewa kwa kurasa za wavuti za App Engine ni <project-uniq-name>.appspot.com na ikiwa jina la huduma linatumika itakuwa: <servicename>-dot-<project-uniq-name>.appspot.com.

Kwa kuwa project-uniq-name inaweza kuwekwa na mtu anayezalisha mradi, huenda isiwe ya nasibu sana na kujaribu kwa nguvu zinaweza kupata programu za wavuti za App Engine zilizofichuliwa na kampuni.

Unaweza kutumia zana kama zile zilizoonyeshwa katika:

GCP - Unauthenticated Enum & Access

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.