From 4f8f9ebb5d015f3edf0b8a549091bccada9bf2e1 Mon Sep 17 00:00:00 2001 From: carlospolop Date: Sat, 17 May 2025 06:58:24 +0200 Subject: [PATCH] delepwn --- .../gcp-security/gcp-to-workspace-pivoting/README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/README.md b/src/pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/README.md index 026f0b86e..7fe59b178 100644 --- a/src/pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/README.md +++ b/src/pentesting-cloud/gcp-security/gcp-to-workspace-pivoting/README.md @@ -38,6 +38,10 @@ python3 gen_delegation_token.py --user-email --key-file --key-file --scopes "https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/cloud-platform, https://www.googleapis.com/auth/admin.directory.group, https://www.googleapis.com/auth/admin.directory.user, https://www.googleapis.com/auth/admin.directory.domain, https://mail.google.com/, https://www.googleapis.com/auth/drive, openid" ``` +#### [**DelePwn**](https://github.com/n0tspam/delepwn) + +Based on the following DeleFriend tool, but with some additions like the ability to enumerate the domain, drive, gmail, calendar and perform other operations. + #### [**DeleFriend**](https://github.com/axon-git/DeleFriend) This is a tool that can perform the attack following these steps: