gitea-mirror/hacktricks-cloud
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks-cloud.git synced 2025-12-30 22:50:43 -08:00
Code Issues Packages Projects Releases Wiki Activity

a

Browse Source
This commit is contained in:
carlospolop
2025-06-10 14:41:34 +02:00
parent e004aa173d
commit 16833c8621
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/pentesting-cloud/gcp-security/gcp-unauthenticated-enum-and-access/gcp-api-keys-unauthenticated-enum.md
View File

@@ -22,7 +22,7 @@ Search it for example in Github following: [https://github.com/search?q=%2FAIza%
This is extremely useful to check to **which GCP project an API key that you have found belongs to**. We have different options:
- Contact `https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig?key=<api-key`
- Contact `https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig?key=<api-key>`
For the sake of brevity the output was truncated, but in the complete output the project ID appears more than 5 times
@@ -36,7 +36,7 @@ curl -s "https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectCo
[...]
```
- Contact `https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig?key=<api-key`
- Contact `https://www.googleapis.com/identitytoolkit/v3/relyingparty/getProjectConfig?key=<api-key>`
For the sake of brevity the output was truncated, but in the complete output the project ID appears more than 5 times