GCP - Compute Unauthenticated Enum

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

Compute

Kwa maelezo zaidi kuhusu Compute na VPC (Networking) angalia:

GCP - Compute Enum

SSRF - Server Side Request Forgery

Ikiwa wavuti ni dhaifu kwa SSRF na inawezekana kuongeza kichwa cha metadata, mshambuliaji anaweza kutumia hii kupata token ya SA OAuth kutoka kwa mwisho wa metadata. Kwa maelezo zaidi kuhusu SSRF angalia:

SSRF (Server Side Request Forgery)HackTricks

Vulnerable exposed services

Ikiwa mfano wa GCP una huduma iliyofichuliwa ambayo ni dhaifu, mshambuliaji anaweza kuitumia kuathiri.

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.