GCP - Composer Enum

Jifunze na kufanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Jifunze na kufanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Angalia mipango ya usajili!

• Jiunge na 💬 kikundi cha Discord au kikundi cha telegram au tufuate kwenye Twitter 🐦 @hacktricks_live.

• Shiriki mbinu za udukuzi kwa kuwasilisha PRs kwenye HackTricks na HackTricks Cloud github repos.

Taarifa za Msingi

Google Cloud Composer ni huduma ya usimamizi kamili ya workflow orchestration iliyojengwa juu ya Apache Airflow. Inakuwezesha kuandika, kupanga ratiba, na kufuatilia mabomba ambayo yanavuka mawingu na vituo vya data vya ndani. Kwa GCP Composer, unaweza kuunganisha kwa urahisi workflows zako na huduma zingine za Google Cloud, kuwezesha kazi za uunganishaji wa data na uchambuzi kwa ufanisi. Huduma hii imeundwa kurahisisha ugumu wa kusimamia workflows za data za mawingu, na kuifanya kuwa chombo muhimu kwa wahandisi wa data na watengenezaji wanaoshughulikia kazi za usindikaji wa data kwa kiwango kikubwa.

Enumeration

# Get envs info
gcloud composer environments list --locations <loc>
gcloud composer environments describe --location <loc> <environment>

# Get list of dags
gcloud composer environments storage dags list --environment <environment> --location <loc>
# Download dags code
mkdir /tmp/dags
gcloud composer environments storage dags export --environment <environment> --location <loc> --destination /tmp/dags

# List Data from composer
gcloud composer environments storage data list --environment <environment> --location <loc>
# Download data
mkdir /tmp/data
gcloud composer environments storage data export --environment <environment> --location <loc> --destination /tmp/data

# List Plugins from composer
gcloud composer environments storage plugins list --environment <environment> --location <loc>
# Download plugins
mkdir /tmp/plugins
gcloud composer environments storage data export --environment <environment> --location <loc> --destination /tmp/plugins

Privesc

Katika ukurasa ufuatao unaweza kuangalia jinsi ya kutumia vibaya ruhusa za composer ili kuongeza marupurupu:

GCP - Composer Privesc

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Angalia mipango ya usajili!

• Jiunge na 💬 kikundi cha Discord au kikundi cha telegram au tufuate kwenye Twitter 🐦 @hacktricks_live.

• Shiriki mbinu za udukuzi kwa kuwasilisha PRs kwenye HackTricks na HackTricks Cloud github repos.