translate fix

.github/pull_request_template.md

@@ -14,4 +14,3 @@ In any case, thanks for contributing to HackTricks!
 
 
 
-

.gitignore

@@ -3,7 +3,6 @@
 
 
 
-
 # General
 .DS_Store
 .AppleDouble

book.toml

@@ -1,5 +1,5 @@
 [book]
-authors = ["Carlos Polop"]
+authors = ["HackTricks Team"]
 language = "en"
 multilingual = false
 src = "src"

scripts/translator.py

@@ -226,7 +226,7 @@ def copy_dirs(source_path, dest_path):
             print(f"Copied .gitbook folder from {source_folder} to {destination_folder}")
 
 def copy_files(source_path, dest_path):
-    file_names = ["src/SUMMARY.md", "hacktricks-preprocessonr.py", "book.toml", ".gitignore"]
+    file_names = ["src/SUMMARY.md", "hacktricks-preprocessor.py", "book.toml", ".gitignore"]
     for file_name in file_names:
         source_filepath = os.path.join(source_path, file_name)
         dest_filepath = os.path.join(dest_path, file_name)

src/README.md

@@ -38,4 +38,3 @@ _Hacktricks logos & motion designed by_ [_@ppiernacho_](https://www.instagram.co
 
 
 
-

src/SUMMARY.md

@@ -505,4 +505,3 @@
 
 
 
-

src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/README.md

@@ -61,4 +61,3 @@ Get-ADSyncConnector
 
 
 
-

src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/pta-pass-through-authentication.md

@@ -71,4 +71,3 @@ seamless-sso.md
 
 
 
-

src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/seamless-sso.md

@@ -118,4 +118,3 @@ python rbdel.py -u <workgroup>\\<user> -p <pass> <ip> azureadssosvc$
 
 
 
-

src/pentesting-cloud/azure-security/az-persistence/README.md

@@ -69,4 +69,3 @@ Open-AADIntOffice365Portal -ImmutableID qIMPTm2Q3kimHgg4KQyveA== -Issuer "http:/
 
 
 
-

src/pentesting-cloud/azure-security/az-persistence/az-queue-persistance.md

@@ -32,4 +32,3 @@ az storage queue policy set --name <queue-name> --permissions rwd --expiry 2024-
 
 
 
-

src/pentesting-cloud/azure-security/az-persistence/az-storage-persistence.md

@@ -42,4 +42,3 @@ az storage blob service-properties delete-policy update \
 
 
 
-

src/pentesting-cloud/azure-security/az-persistence/az-vms-persistence.md

@@ -26,4 +26,3 @@ An attacker could get access to the instances and backdoor them:
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/README.md

@@ -3,4 +3,3 @@
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-blob-storage-post-exploitation.md

@@ -46,4 +46,3 @@ This would allow to delete objects inside the storage account which might **inte
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-file-share-post-exploitation.md

@@ -49,4 +49,3 @@ This would allow to delete file inside the shared filesystem which might **inter
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-function-apps-post-exploitation.md

@@ -18,4 +18,3 @@ For more information about function apps check:
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-key-vault-post-exploitation.md

@@ -112,4 +112,3 @@ az keyvault secret restore --vault-name <vault-name> --file <backup-file-path>
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-queue-post-exploitation.md

@@ -90,4 +90,3 @@ az storage queue policy set --name <queue-name> --permissions rwd --expiry 2024-
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-servicebus-post-exploitation.md

@@ -100,4 +100,3 @@ Take a look here:
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-sql-post-exploitation.md

@@ -103,4 +103,3 @@ az sql db import --admin-user <admin-user> \
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-table-storage-post-exploitation.md

@@ -65,4 +65,3 @@ This would allow to delete file inside the shared filesystem which might **inter
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-vms-and-network-post-exploitation.md

@@ -182,4 +182,3 @@ az vm application set \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/README.md

@@ -3,4 +3,3 @@
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-app-services-privesc.md

@@ -40,4 +40,3 @@ ssh root@127.0.0.1 -p 39895
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-authorization-privesc.md

@@ -83,4 +83,3 @@ az rest --method PUT \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/README.md

@@ -358,4 +358,3 @@ az rest --method GET \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md

@@ -182,4 +182,3 @@ $data = Get-SharePointFilesFromGraph -authentication $token $data[0].downloadUrl
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/dynamic-groups.md

@@ -51,4 +51,3 @@ az rest --method GET \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-functions-app-privesc.md

@@ -458,4 +458,3 @@ az functionapp deployment source config \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-key-vault-privesc.md

@@ -35,4 +35,3 @@ az keyvault set-policy \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-queue-privesc.md

@@ -74,4 +74,3 @@ az storage queue policy set --name <queue-name> --permissions rwd --expiry 2024-
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-servicebus-privesc.md

@@ -155,4 +155,3 @@ az servicebus namespace authorization-rule update \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-sql-privesc.md

@@ -112,4 +112,3 @@ az sql server azure-ad-only-auth disable \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-storage-privesc.md

@@ -153,4 +153,3 @@ az storage share-rm restore \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-virtual-machines-and-network-privesc.md

@@ -383,4 +383,3 @@ According to the [**docs**](https://learn.microsoft.com/en-us/azure/role-based-a
 
 
 
-

src/pentesting-cloud/azure-security/az-services/README.md

@@ -74,4 +74,3 @@ def main(req: func.HttpRequest) -> func.HttpResponse:
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-acr.md

@@ -53,4 +53,3 @@ docker pull <corp-name>.azurecr.io/<image>:<tag>
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-app-service.md

@@ -88,7 +88,6 @@ az webapp config storage-account list --name <name> --resource-gl_group
 
 
 
-
 # List all the functions
 az functionapp list
 
@@ -213,4 +212,3 @@ git clone 'https://<username>:<password>@name.scm.azurewebsites.net/repo-name.gi
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-application-proxy.md

@@ -41,4 +41,3 @@ Get-ApplicationProxyAssignedUsersAndGroups -ObjectId <object-id>
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-arm-templates.md

@@ -32,4 +32,3 @@ cat <PATH TO .json FILE> | Select-String password
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-automation-account/README.md

@@ -179,4 +179,3 @@ $response = Invoke-WebRequest -Method Post -Uri $uri -Body $body
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-automation-account/az-state-configuration-rce.md

@@ -66,4 +66,3 @@ The successful execution of this process opens numerous possibilities for furthe
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-azuread.md

@@ -1032,4 +1032,3 @@ The default mode is **Audit**:
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-file-shares.md

@@ -173,4 +173,3 @@ Same as storage persistence:
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-function-apps.md

@@ -267,4 +267,3 @@ az rest --url "https://management.azure.com/<subscription>/resourceGroups/<res-g
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-logic-apps.md

@@ -70,4 +70,3 @@ Get-AzLogicApp -ResourceGroupName <ResourceGroupName> -Name <LogicAppName>
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-management-groups-subscriptions-and-resource-groups.md

@@ -57,4 +57,3 @@ az group list --subscription "<subscription>" --output table
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-queue-enum.md

@@ -96,4 +96,3 @@ $queueMessage.Value
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-servicebus-enum.md

@@ -101,4 +101,3 @@ az servicebus namespace authorization-rule keys list --resource-group <MyResourc
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-sql.md

@@ -262,4 +262,3 @@ sqlcmd -S <sql-server>.database.windows.net -U <server-user> -P <server-passwork
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-storage.md

@@ -438,4 +438,3 @@ az-file-shares.md
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-table-storage.md

@@ -110,4 +110,3 @@ Same as storage persistence:
 
 
 
-

src/pentesting-cloud/azure-security/az-services/intune.md

@@ -32,4 +32,3 @@ The execution of the script can take up to **one hour**.
 
 
 
-

src/pentesting-cloud/azure-security/az-services/keyvault.md

@@ -185,4 +185,3 @@ done
 
 
 
-

src/pentesting-cloud/azure-security/az-services/vms/README.md

@@ -862,4 +862,3 @@ Invoke-AzureRmVMBulkCMD -Script Mimikatz.ps1 -Verbose -output Output.txt
 
 
 
-

src/pentesting-cloud/azure-security/az-services/vms/az-azure-network.md

@@ -465,4 +465,3 @@ Get-AzExpressRouteCircuit
 
 
 
-

src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/README.md

@@ -249,4 +249,3 @@ az-password-spraying.md
 
 
 
-

src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-device-code-authentication-phishing.md

@@ -8,4 +8,3 @@
 
 
 
-

src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-oauth-apps-phishing.md

@@ -152,4 +152,3 @@ Check the Applications and Service Principal sections of the page:
 
 
 
-

src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-password-spraying.md

@@ -36,4 +36,3 @@ Invoke-PasswordSprayGmail -UserList .\userlist.txt -Password Fall2016 -Threads 1
 
 
 
-

src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-vms-unath.md

@@ -42,4 +42,3 @@ az vm extension image list --publisher "Site24x7" --output table
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/README.md

@@ -44,4 +44,3 @@ do-services/
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-basic-information.md

@@ -136,4 +136,3 @@ The **logs of a team** can be found in [**https://cloud.digitalocean.com/account
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-permissions-for-a-pentest.md

@@ -8,4 +8,3 @@ DO doesn't support granular permissions. So the **minimum role** that allows a u
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/README.md

@@ -20,4 +20,3 @@ DO offers a few services, here you can find how to **enumerate them:**
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-apps.md

@@ -35,4 +35,3 @@ That will give you a **shell**, and just executing **`env`** you will be able to
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-container-registry.md

@@ -34,4 +34,3 @@ doctl registry repository list-v2
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-databases.md

@@ -44,4 +44,3 @@ doctl databases pool list <db-id> # List pools of DB
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-droplets.md

@@ -82,4 +82,3 @@ It's also possible to launch a **recovery console** to run commands inside the h
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-functions.md

@@ -61,4 +61,3 @@ doctl serverless activations result <activation-id> # get only the response resu
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-images.md

@@ -20,4 +20,3 @@ doctl compute image list
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-kubernetes-doks.md

@@ -40,4 +40,3 @@ doctl kubernetes cluster list-associated-resources <cluster-id>
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-networking.md

@@ -46,4 +46,3 @@ doctl compute firewall remove-droplets <fw-id> --droplet-ids <droplet-id>
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-projects.md

@@ -24,4 +24,3 @@ doctl projects resources list <proj-id> # Get all the resources of a project
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-spaces.md

@@ -47,4 +47,3 @@ aws s3 ls --endpoint=https://fra1.digitaloceanspaces.com s3://uniqbucketname
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-volumes.md

@@ -16,4 +16,3 @@ compute volume list
 
 
 
-

src/pentesting-cloud/gcp-security/README.md

@@ -246,4 +246,3 @@ gcloud config unset auth/access_token_file
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-basic-information/README.md

@@ -231,4 +231,3 @@ As defined by terraform in [https://registry.terraform.io/providers/hashicorp/go
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md

@@ -154,4 +154,3 @@ jobs:
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-permissions-for-a-pentest.md

@@ -145,4 +145,3 @@ roles/bigquery.metadataViewer
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/README.md

@@ -3,4 +3,3 @@
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-api-keys-persistence.md

@@ -22,4 +22,3 @@ Check how to do this in:
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-app-engine-persistence.md

@@ -22,4 +22,3 @@ If yoi could just modify the code of a running version or create a new one yo co
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-artifact-registry-persistence.md

@@ -43,4 +43,3 @@ https://book.hacktricks.xyz/pentesting-web/dependency-confusion
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-bigquery-persistence.md

@@ -22,4 +22,3 @@ Grant further access over datasets, tables, rows and columns to compromised user
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-functions-persistence.md

@@ -20,4 +20,3 @@ For more info about Cloud Functions check:
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-run-persistence.md

@@ -26,4 +26,3 @@ Create a backdoored Service or Job
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-shell-persistence.md

@@ -70,4 +70,3 @@ But you can find further information in [https://github.com/FrancescoDiSalesGith
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-sql-persistence.md

@@ -38,4 +38,3 @@ For more information check the technique in:
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-compute-persistence.md

@@ -20,4 +20,3 @@ For more informatoin about Compute and VPC (Networking) check:
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-dataflow-persistence.md

@@ -54,4 +54,3 @@ gcloud dataflow $NAME_TEMPLATE run testing \
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-filestore-persistence.md

@@ -22,4 +22,3 @@ gcp-filestore-persistence.md
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-logging-persistence.md

@@ -22,4 +22,3 @@ gcloud logging sinks create <sink-name> <destination> --log-filter="FILTER_CONDI
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-non-svc-persistance.md

@@ -105,4 +105,3 @@ Some remediations for these techniques are explained in [https://www.netskope.co
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-secret-manager-persistence.md

@@ -23,4 +23,3 @@ An attacker could update the secret to:
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-storage-persistence.md

@@ -39,4 +39,3 @@ Another exploit script for this method can be found [here](https://github.com/Rh
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-post-exploitation/README.md

@@ -3,4 +3,3 @@
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-app-engine-post-exploitation.md

@@ -44,4 +44,3 @@ Modify source code to steal credentials if they are being sent or perform a defa
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md

@@ -22,4 +22,3 @@ The Post Exploitation and Privesc techniques of Artifact Registry were mixed in:
 
 
 
-