From 16833c86213e0ce67b43837dfba3e032943a157f Mon Sep 17 00:00:00 2001 From: carlospolop Date: Tue, 10 Jun 2025 14:41:34 +0200 Subject: [PATCH] a --- .../gcp-api-keys-unauthenticated-enum.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md index ad731c461..ddb5b908e 100644 --- a/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md +++ b/src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md @@ -22,7 +22,7 @@ Search it for example in Github following: [https://github.com/search?q=%2FAIza% This is extremely useful to check to **which GCP project an API key that you have found belongs to**. We have different options: -- Contact `https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig?key=` For the sake of brevity the output was truncated, but in the complete output the project ID appears more than 5 times @@ -36,7 +36,7 @@ curl -s "https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectCo [...] ``` -- Contact `https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig?key=` For the sake of brevity the output was truncated, but in the complete output the project ID appears more than 5 times