gitea-mirror/hacktricks-cloud
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks-cloud.git synced 2026-01-02 07:50:00 -08:00
Code Issues Packages Projects Releases Wiki Activity

MIGRATION TYPOS

Browse Source
This commit is contained in:
Carlos Polop
2025-01-05 21:15:12 +01:00
parent c1aee098b6
commit 3a7480d764
20 changed files with 166 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/pentesting-ci-cd/github-security/abusing-github-actions/README.md
View File

@@ -508,7 +508,7 @@ An example can be find in the following expandable:
<details>
<summary>Github Action Build &#x26; Push Docker Image</summary>
<summary>Github Action Build & Push Docker Image</summary>
```yaml
[...]

6
src/pentesting-ci-cd/vercel-security.md
View File

@@ -20,7 +20,7 @@ For a hardening review of **Vercel** you need to ask for a user with **Viewer ro
- **Misconfiguration:** Allows to transfer the project to another team
- **Risk:** An attacker could steal the project
- **Delete Project**
- **Misconfiguration:** Allows to delete the project&#x20;
- **Misconfiguration:** Allows to delete the project
- **Risk:** Delete the prject
---
@@ -287,7 +287,7 @@ For a hardening review of **Vercel** you need to ask for a user with **Viewer ro
- **Misconfiguration:** Allows to transfer all the projects to another team
- **Risk:** An attacker could steal the projects
- **Delete Project**
- **Misconfiguration:** Allows to delete the team with all the projects&#x20;
- **Misconfiguration:** Allows to delete the team with all the projects
- **Risk:** Delete the projects
---
@@ -344,7 +344,7 @@ An **Access Group** in Vercel is a collection of projects and team members with
#### Security Configurations:
- **Team Email Domain:** When configured, this setting automatically invites Vercel Personal Accounts with email addresses ending in the specified domain (e.g., `mydomain.com`) to join your team upon signup and on the dashboard.
- **Misconfiguration:**&#x20;
- **Misconfiguration:**
- Specifying the wrong email domain or a misspelled domain in the Team Email Domain setting.
- Using a common email domain (e.g., `gmail.com`, `hotmail.com`) instead of a company-specific domain.
- **Risks:**