diff --git a/src/pentesting-cloud/azure-security/az-persistence/az-cloud-shell-persistence.md b/src/pentesting-cloud/azure-security/az-persistence/az-cloud-shell-persistence.md index 4b24b4a86..590b96216 100644 --- a/src/pentesting-cloud/azure-security/az-persistence/az-cloud-shell-persistence.md +++ b/src/pentesting-cloud/azure-security/az-persistence/az-cloud-shell-persistence.md @@ -1,19 +1,6 @@ # Az - Cloud Shell Persistence -{% hint style="success" %} -Learn & practice AWS Hacking:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -Learn & practice GCP Hacking: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -Support HackTricks - -* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)! -* **Join the** ๐Ÿ’ฌ [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.** -* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos. - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} ## Cloud Shell Persistence @@ -40,17 +27,4 @@ curl -H "Metadata:true" "http://169.254.169.254/metadata/identity/oauth2/token?a {% endcode %} -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**๋””์Šค์ฝ”๋“œ ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **ํŠธ์œ„ํ„ฐ** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} diff --git a/src/pentesting-cloud/azure-security/az-post-exploitation/az-cosmosDB-post-exploitation.md b/src/pentesting-cloud/azure-security/az-post-exploitation/az-cosmosDB-post-exploitation.md index cc4c2b79a..ac3ad7c47 100644 --- a/src/pentesting-cloud/azure-security/az-post-exploitation/az-cosmosDB-post-exploitation.md +++ b/src/pentesting-cloud/azure-security/az-post-exploitation/az-cosmosDB-post-exploitation.md @@ -1,22 +1,9 @@ # Az - CosmosDB Post Exploitation -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**Discord ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} ## CosmosDB Post Exploitation -SQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์— ๋Œ€ํ•œ ์ž์„ธํ•œ ์ •๋ณด๋Š” ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: +SQL Database์— ๋Œ€ํ•œ ์ž์„ธํ•œ ๋‚ด์šฉ์€ ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: {% content-ref url="../az-services/az-cosmosDB.md" %} [az-cosmosDB.md](../az-services/az-cosmosDB.md) @@ -24,7 +11,7 @@ SQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์— ๋Œ€ํ•œ ์ž์„ธํ•œ ์ •๋ณด๋Š” ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: ### "Microsoft.DocumentDB/databaseAccounts/read" && "Microsoft.DocumentDB/databaseAccounts/write" -์ด ๊ถŒํ•œ์œผ๋กœ Azure Cosmos DB ๊ณ„์ •์„ ์ƒ์„ฑํ•˜๊ฑฐ๋‚˜ ์—…๋ฐ์ดํŠธํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์—ฌ๊ธฐ์—๋Š” ๊ณ„์ • ์ˆ˜์ค€ ์„ค์ • ์ˆ˜์ •, ์ง€์—ญ ์ถ”๊ฐ€ ๋˜๋Š” ์ œ๊ฑฐ, ์ผ๊ด€์„ฑ ์ˆ˜์ค€ ๋ณ€๊ฒฝ, ๋‹ค์ค‘ ์ง€์—ญ ์“ฐ๊ธฐ์™€ ๊ฐ™์€ ๊ธฐ๋Šฅ ํ™œ์„ฑํ™” ๋˜๋Š” ๋น„ํ™œ์„ฑํ™”๊ฐ€ ํฌํ•จ๋ฉ๋‹ˆ๋‹ค. +์ด ๊ถŒํ•œ์„ ์‚ฌ์šฉํ•˜๋ฉด Azure Cosmos DB ๊ณ„์ •์„ ์ƒ์„ฑํ•˜๊ฑฐ๋‚˜ ์—…๋ฐ์ดํŠธํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์—ฌ๊ธฐ์—๋Š” ๊ณ„์ • ์ˆ˜์ค€ ์„ค์ • ์ˆ˜์ •, ์ง€์—ญ ์ถ”๊ฐ€ ๋˜๋Š” ์ œ๊ฑฐ, ์ผ๊ด€์„ฑ ์ˆ˜์ค€ ๋ณ€๊ฒฝ, ๋‹ค์ค‘ ์ง€์—ญ ์“ฐ๊ธฐ์™€ ๊ฐ™์€ ๊ธฐ๋Šฅ ํ™œ์„ฑํ™” ๋˜๋Š” ๋น„ํ™œ์„ฑํ™”๊ฐ€ ํฌํ•จ๋ฉ๋‹ˆ๋‹ค. {% code overflow="wrap" %} ```bash @@ -99,7 +86,7 @@ az cosmosdb keys regenerate \ ### "Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/userDefinedFunctions/write" && "Microsoft.DocumentDB/databaseAccounts/sqlDatabases/containers/userDefinedFunctions/read" -์ด ๊ถŒํ•œ์„ ์‚ฌ์šฉํ•˜๋ฉด Azure Cosmos DB ๊ณ„์ •์˜ SQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ์ปจํ…Œ์ด๋„ˆ ๋‚ด์—์„œ ํŠธ๋ฆฌ๊ฑฐ๋ฅผ ์ƒ์„ฑํ•˜๊ฑฐ๋‚˜ ์ˆ˜์ •ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ํŠธ๋ฆฌ๊ฑฐ๋Š” ์ž‘์—…์— ๋Œ€ํ•œ ์‘๋‹ต์œผ๋กœ ์„œ๋ฒ„ ์ธก ๋…ผ๋ฆฌ๋ฅผ ์‹คํ–‰ํ•  ์ˆ˜ ์žˆ๊ฒŒ ํ•ด์ค๋‹ˆ๋‹ค. +์ด ๊ถŒํ•œ์„ ์‚ฌ์šฉํ•˜๋ฉด Azure Cosmos DB ๊ณ„์ •์˜ SQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ์ปจํ…Œ์ด๋„ˆ ๋‚ด์—์„œ ํŠธ๋ฆฌ๊ฑฐ๋ฅผ ์ƒ์„ฑํ•˜๊ฑฐ๋‚˜ ์ˆ˜์ •ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ํŠธ๋ฆฌ๊ฑฐ๋Š” ์ž‘์—…์— ๋Œ€ํ•œ ์‘๋‹ต์œผ๋กœ ์„œ๋ฒ„ ์ธก ๋กœ์ง์„ ์‹คํ–‰ํ•  ์ˆ˜ ์žˆ๊ฒŒ ํ•ด์ค๋‹ˆ๋‹ค. {% code overflow="wrap" %} ```bash @@ -227,17 +214,4 @@ az cosmosdb mongodb user definition create \ ``` {% endcode %} -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**๋””์Šค์ฝ”๋“œ ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **ํŠธ์œ„ํ„ฐ** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} diff --git a/src/pentesting-cloud/azure-security/az-post-exploitation/az-logic-apps-post-exploitation.md b/src/pentesting-cloud/azure-security/az-post-exploitation/az-logic-apps-post-exploitation.md index 92be9f6f0..0e50c76bd 100644 --- a/src/pentesting-cloud/azure-security/az-post-exploitation/az-logic-apps-post-exploitation.md +++ b/src/pentesting-cloud/azure-security/az-post-exploitation/az-logic-apps-post-exploitation.md @@ -1,22 +1,9 @@ # Az - Logic Apps Post Exploitation -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) +{{#include ../../../banners/hacktricks-training.md}} -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**Discord ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} - -## Logic Apps ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ํฌ์ŠคํŠธ ์ต์Šคํ”Œ๋กœ์ดํ…Œ์ด์…˜ -Logic Apps์— ๋Œ€ํ•œ ์ž์„ธํ•œ ์ •๋ณด๋Š” ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: +## Logic Apps Database Post Exploitation +Logic Apps์— ๋Œ€ํ•œ ์ž์„ธํ•œ ๋‚ด์šฉ์€ ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: {% content-ref url="../az-services/az-logic-apps.md" %} [az-logic-apps.md](../az-services/az-logic-apps.md) @@ -61,7 +48,7 @@ az webapp start/stop/restart \ ### "Microsoft.Web/sites/config/list/action", "Microsoft.Web/sites/read" && "Microsoft.Web/sites/config/write" -์ด ๊ถŒํ•œ์„ ์‚ฌ์šฉํ•˜๋ฉด App Service Plan์— ํ˜ธ์ŠคํŒ…๋œ Logic Apps๋ฅผ ํฌํ•จํ•œ ์›น ์•ฑ์˜ ์„ค์ •์„ ๊ตฌ์„ฑํ•˜๊ฑฐ๋‚˜ ์ˆ˜์ •ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์ด๋ฅผ ํ†ตํ•ด ์•ฑ ์„ค์ •, ์—ฐ๊ฒฐ ๋ฌธ์ž์—ด, ์ธ์ฆ ๊ตฌ์„ฑ ๋“ฑ์„ ๋ณ€๊ฒฝํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. +์ด ๊ถŒํ•œ์„ ์‚ฌ์šฉํ•˜๋ฉด App Service Plan์— ํ˜ธ์ŠคํŒ…๋œ Logic Apps๋ฅผ ํฌํ•จํ•˜์—ฌ ์›น ์•ฑ์˜ ์„ค์ •์„ ๊ตฌ์„ฑํ•˜๊ฑฐ๋‚˜ ์ˆ˜์ •ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์ด๋ฅผ ํ†ตํ•ด ์•ฑ ์„ค์ •, ์—ฐ๊ฒฐ ๋ฌธ์ž์—ด, ์ธ์ฆ ๊ตฌ์„ฑ ๋“ฑ์„ ๋ณ€๊ฒฝํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. {% code overflow="wrap" %} ```bash @@ -165,17 +152,4 @@ az logic integration-account session create \ ### "*/delete" ์ด ๊ถŒํ•œ์œผ๋กœ Azure Logic Apps์™€ ๊ด€๋ จ๋œ ๋ฆฌ์†Œ์Šค๋ฅผ ์‚ญ์ œํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**Discord ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} diff --git a/src/pentesting-cloud/azure-security/az-post-exploitation/az-mysql-post-exploitation.md b/src/pentesting-cloud/azure-security/az-post-exploitation/az-mysql-post-exploitation.md index eb0e8a9f5..1a540556a 100644 --- a/src/pentesting-cloud/azure-security/az-post-exploitation/az-mysql-post-exploitation.md +++ b/src/pentesting-cloud/azure-security/az-post-exploitation/az-mysql-post-exploitation.md @@ -1,19 +1,6 @@ # Az - MySQL Post Exploitation -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**๋””์Šค์ฝ”๋“œ ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **ํŠธ์œ„ํ„ฐ** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} ## MySQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ํฌ์ŠคํŠธ ์ต์Šคํ”Œ๋กœ์ดํ…Œ์ด์…˜ MySQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์— ๋Œ€ํ•œ ์ž์„ธํ•œ ์ •๋ณด๋Š” ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: @@ -87,7 +74,7 @@ az mysql flexible-server firewall-rule update \ ### "Microsoft.DBforMySQL/flexibleServers/resetGtid/action" -์ด ๊ถŒํ•œ์„ ์‚ฌ์šฉํ•˜๋ฉด Azure์˜ MySQL Flexible Server ์ธ์Šคํ„ด์Šค์— ๋Œ€ํ•œ GTID(์ „์—ญ ํŠธ๋žœ์žญ์…˜ ์‹๋ณ„์ž)๋ฅผ ์žฌ์„ค์ •ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. GTID๋ฅผ ์žฌ์„ค์ •ํ•˜๋ฉด ์žฌ์„ค์ • ์ž‘์—… ์ด์ „์— ์ˆ˜ํ–‰๋œ ๋ชจ๋“  ์ž๋™ํ™”๋œ ์˜จ๋””๋งจ๋“œ ๋ฐฑ์—… ๋ฐ ์ง€๋ฆฌ์  ๋ฐฑ์—…์ด ๋ฌดํšจํ™”๋ฉ๋‹ˆ๋‹ค. GTID ์žฌ์„ค์ • ํ›„, ์„ ํƒํ•œ ๋ณต์› ์‹œ๊ฐ„์ด GTID ์žฌ์„ค์ • ์‹œ๊ฐ„ ์ด์ „์ธ ๊ฒฝ์šฐ ๊ฐ€์žฅ ๋น ๋ฅธ ๋ณต์› ์ง€์ ์ด๋‚˜ ์‚ฌ์šฉ์ž ์ง€์ • ๋ณต์› ์ง€์ ์„ ์‚ฌ์šฉํ•˜์—ฌ PITR(์‹œ์  ๋ณต์›)๋ฅผ ์ˆ˜ํ–‰ํ•  ์ˆ˜ ์—†์Šต๋‹ˆ๋‹ค. ๊ทธ๋ฆฌ๊ณ  ์„ฑ๊ณต์ ์ธ ์ง€๋ฆฌ์  ๋ณต์›์€ 5์ผ ํ›„์—๋งŒ ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๋‹ค. +์ด ๊ถŒํ•œ์„ ์‚ฌ์šฉํ•˜๋ฉด Azure์˜ MySQL Flexible Server ์ธ์Šคํ„ด์Šค์— ๋Œ€ํ•œ GTID(์ „์—ญ ํŠธ๋žœ์žญ์…˜ ์‹๋ณ„์ž)๋ฅผ ์žฌ์„ค์ •ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. GTID๋ฅผ ์žฌ์„ค์ •ํ•˜๋ฉด ์žฌ์„ค์ • ์ž‘์—… ์ด์ „์— ์ˆ˜ํ–‰๋œ ๋ชจ๋“  ์ž๋™ํ™”๋œ ์˜จ๋””๋งจ๋“œ ๋ฐฑ์—… ๋ฐ ์ง€๋ฆฌ์  ๋ฐฑ์—…์ด ๋ฌดํšจํ™”๋ฉ๋‹ˆ๋‹ค. GTID ์žฌ์„ค์ • ํ›„, ์„ ํƒํ•œ ๋ณต์› ์‹œ๊ฐ„์ด GTID ์žฌ์„ค์ • ์‹œ๊ฐ„ ์ด์ „์ธ ๊ฒฝ์šฐ ๊ฐ€์žฅ ๋น ๋ฅธ ๋ณต์› ์ง€์ ์ด๋‚˜ ์‚ฌ์šฉ์ž ์ง€์ • ๋ณต์› ์ง€์ ์„ ์‚ฌ์šฉํ•˜์—ฌ PITR(์‹œ์  ๋ณต์›)๋ฅผ ์ˆ˜ํ–‰ํ•  ์ˆ˜ ์—†์Šต๋‹ˆ๋‹ค. ์„ฑ๊ณต์ ์ธ ์ง€๋ฆฌ์  ๋ณต์›์€ 5์ผ ํ›„์—๋งŒ ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๋‹ค. {% code overflow="wrap" %} ```bash @@ -151,17 +138,4 @@ az mysql flexible-server start \ With this permissions you can delete resources related to mysql server in Azure such as server, firewalls, managed identities or configurations -{% hint style="success" %} -Learn & practice AWS Hacking:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -Learn & practice GCP Hacking: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -Support HackTricks - -* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)! -* **Join the** ๐Ÿ’ฌ [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.** -* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos. - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} diff --git a/src/pentesting-cloud/azure-security/az-post-exploitation/az-postgresql-post-exploitation.md b/src/pentesting-cloud/azure-security/az-post-exploitation/az-postgresql-post-exploitation.md index 86098c00e..e0a20eb7f 100644 --- a/src/pentesting-cloud/azure-security/az-post-exploitation/az-postgresql-post-exploitation.md +++ b/src/pentesting-cloud/azure-security/az-post-exploitation/az-postgresql-post-exploitation.md @@ -1,19 +1,6 @@ # Az - PostgreSQL Post Exploitation -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**๋””์Šค์ฝ”๋“œ ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **ํŠธ์œ„ํ„ฐ** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŠธ๋ฆญ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} ## PostgreSQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ํฌ์ŠคํŠธ ์ต์Šคํ”Œ๋กœ์ดํ…Œ์ด์…˜ PostgreSQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์— ๋Œ€ํ•œ ์ž์„ธํ•œ ์ •๋ณด๋Š” ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: @@ -139,17 +126,4 @@ az postgres flexible-server identity assign \ With this permissions you can delete resources related to postgres server in Azure such as server, firewalls, managed identities or configurations -{% hint style="success" %} -Learn & practice AWS Hacking:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -Learn & practice GCP Hacking: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -Support HackTricks - -* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)! -* **Join the** ๐Ÿ’ฌ [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.** -* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos. - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} diff --git a/src/pentesting-cloud/azure-security/az-privilege-escalation/az-cosmosDB-privesc.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-cosmosDB-privesc.md index 37c3d1620..16497fedb 100644 --- a/src/pentesting-cloud/azure-security/az-privilege-escalation/az-cosmosDB-privesc.md +++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-cosmosDB-privesc.md @@ -1,22 +1,9 @@ # Az - CosmosDB Privesc -{% hint style="success" %} -Learn & practice AWS Hacking:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -Learn & practice GCP Hacking: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -Support HackTricks - -* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)! -* **Join the** ๐Ÿ’ฌ [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.** -* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos. - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} ## CosmosDB Privesc -SQL Database์— ๋Œ€ํ•œ ์ž์„ธํ•œ ์ •๋ณด๋Š” ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: +SQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์— ๋Œ€ํ•œ ์ž์„ธํ•œ ๋‚ด์šฉ์€ ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: {% content-ref url="../az-services/az-cosmosDB.md" %} [az-cosmosDB.md](../az-services/az-cosmosDB.md) @@ -77,17 +64,4 @@ az cosmosdb keys list \ {% endcode %} -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**๋””์Šค์ฝ”๋“œ ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **ํŠธ์œ„ํ„ฐ** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} diff --git a/src/pentesting-cloud/azure-security/az-privilege-escalation/az-logic-apps-privesc.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-logic-apps-privesc.md index 80aeec015..1aad1e2f6 100644 --- a/src/pentesting-cloud/azure-security/az-privilege-escalation/az-logic-apps-privesc.md +++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-logic-apps-privesc.md @@ -1,22 +1,9 @@ # Az - Logic Apps Privesc -{% hint style="success" %} -Learn & practice AWS Hacking:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -Learn & practice GCP Hacking: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -Support HackTricks - -* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)! -* **Join the** ๐Ÿ’ฌ [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.** -* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos. - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} ## Logic Apps Privesc -SQL Database์— ๋Œ€ํ•œ ์ž์„ธํ•œ ์ •๋ณด๋Š” ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: +SQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์— ๋Œ€ํ•œ ์ž์„ธํ•œ ๋‚ด์šฉ์€ ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: {% content-ref url="../az-services/az-logic-apps.md" %} [az-logic-apps.md](../az-services/az-logic-apps.md) @@ -61,17 +48,4 @@ az logicapp deployment source config-zip \ ``` {% endcode %} -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**Discord ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŠธ๋ฆญ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} diff --git a/src/pentesting-cloud/azure-security/az-privilege-escalation/az-mysql-privesc.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-mysql-privesc.md index daf68b8ea..0bba0e1e3 100644 --- a/src/pentesting-cloud/azure-security/az-privilege-escalation/az-mysql-privesc.md +++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-mysql-privesc.md @@ -1,19 +1,7 @@ # Az - MySQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ๊ถŒํ•œ ์ƒ์Šน -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) +{{#include ../../../banners/hacktricks-training.md}} -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**Discord ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŠธ๋ฆญ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} ## MySQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ๊ถŒํ•œ ์ƒ์Šน SQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์— ๋Œ€ํ•œ ์ž์„ธํ•œ ์ •๋ณด๋Š” ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: @@ -24,7 +12,7 @@ SQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์— ๋Œ€ํ•œ ์ž์„ธํ•œ ์ •๋ณด๋Š” ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: ### ""Microsoft.DBforMySQL/flexibleServers/read" && "Microsoft.DBforMySQL/flexibleServers/write" -์ด ๊ถŒํ•œ์„ ์‚ฌ์šฉํ•˜๋ฉด Azure์—์„œ MySQL Flexible Server ์ธ์Šคํ„ด์Šค๋ฅผ ์ƒ์„ฑ, ์—…๋ฐ์ดํŠธ ๋˜๋Š” ์‚ญ์ œํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์—ฌ๊ธฐ์—๋Š” ์ƒˆ๋กœ์šด ์„œ๋ฒ„ ํ”„๋กœ๋น„์ €๋‹, ๊ธฐ์กด ์„œ๋ฒ„ ๊ตฌ์„ฑ ์ˆ˜์ • ๋˜๋Š” ์„œ๋ฒ„ ํ๊ธฐ ๋“ฑ์ด ํฌํ•จ๋ฉ๋‹ˆ๋‹ค. +์ด ๊ถŒํ•œ์„ ์‚ฌ์šฉํ•˜๋ฉด Azure์—์„œ MySQL Flexible Server ์ธ์Šคํ„ด์Šค๋ฅผ ์ƒ์„ฑ, ์—…๋ฐ์ดํŠธ ๋˜๋Š” ์‚ญ์ œํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์—ฌ๊ธฐ์—๋Š” ์ƒˆ๋กœ์šด ์„œ๋ฒ„ ํ”„๋กœ๋น„์ €๋‹, ๊ธฐ์กด ์„œ๋ฒ„ ๊ตฌ์„ฑ ์ˆ˜์ • ๋˜๋Š” ์„œ๋ฒ„ ํ๊ธฐ๊ฐ€ ํฌํ•จ๋ฉ๋‹ˆ๋‹ค. {% code overflow="wrap" %} ```bash @@ -52,7 +40,7 @@ az mysql flexible-server update \ ``` {% endcode %} -๋˜ํ•œ ๋น„๊ณต๊ฐœ ์—”๋“œํฌ์ธํŠธ๊ฐ€ ์•„๋‹Œ ๊ฒฝ์šฐ ์•ก์„ธ์Šคํ•˜๋ ค๋ฉด ๊ณต์šฉ ์•ก์„ธ์Šค๋ฅผ ํ™œ์„ฑํ™”ํ•ด์•ผ ํ•ฉ๋‹ˆ๋‹ค. ํ™œ์„ฑํ™”ํ•˜๋ ค๋ฉด: +๋˜ํ•œ ๋น„๊ณต๊ฐœ ์—”๋“œํฌ์ธํŠธ๊ฐ€ ์•„๋‹Œ ๊ณณ์—์„œ ์ ‘๊ทผํ•˜๋ ค๋ฉด ๊ณต๊ฐœ ์•ก์„ธ์Šค๋ฅผ ํ™œ์„ฑํ™”ํ•ด์•ผ ํ•ฉ๋‹ˆ๋‹ค. ์ด๋ฅผ ํ™œ์„ฑํ™”ํ•˜๋ ค๋ฉด: {% code overflow="wrap" %} ```bash @@ -62,7 +50,7 @@ az mysql flexible-server update --resource-group --server- ### ""Microsoft.DBforMySQL/flexibleServers/read", "Microsoft.DBforMySQL/flexibleServers/write", "Microsoft.ManagedIdentity/userAssignedIdentities/assign/action", "Microsoft.DBforMySQL/flexibleServers/administrators/write" && "Microsoft.DBforMySQL/flexibleServers/administrators/read"" -์ด ๊ถŒํ•œ์„ ์‚ฌ์šฉํ•˜๋ฉด MySQL Flexible Server์— ๋Œ€ํ•œ Azure Active Directory (AD) ๊ด€๋ฆฌ์ž๋ฅผ ๊ตฌ์„ฑํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์ด๋Š” ์ž์‹  ๋˜๋Š” ๋‹ค๋ฅธ ๊ณ„์ •์„ AD ๊ด€๋ฆฌ์ž์œผ๋กœ ์„ค์ •ํ•˜์—ฌ MySQL ์„œ๋ฒ„์— ๋Œ€ํ•œ ์ „์ฒด ๊ด€๋ฆฌ ๊ถŒํ•œ์„ ๋ถ€์—ฌํ•จ์œผ๋กœ์จ ์•…์šฉ๋  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. flexible-server์— ์‚ฌ์šฉ์ž ํ• ๋‹น ๊ด€๋ฆฌ ID๊ฐ€ ์žˆ์–ด์•ผ ํ•ฉ๋‹ˆ๋‹ค. +์ด ๊ถŒํ•œ์„ ์‚ฌ์šฉํ•˜๋ฉด MySQL Flexible Server์— ๋Œ€ํ•œ Azure Active Directory (AD) ๊ด€๋ฆฌ์ž๋ฅผ ๊ตฌ์„ฑํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์ด๋Š” ์ž์‹  ๋˜๋Š” ๋‹ค๋ฅธ ๊ณ„์ •์„ AD ๊ด€๋ฆฌ์ž์œผ๋กœ ์„ค์ •ํ•˜์—ฌ MySQL ์„œ๋ฒ„์— ๋Œ€ํ•œ ์ „์ฒด ๊ด€๋ฆฌ ๊ถŒํ•œ์„ ๋ถ€์—ฌํ•จ์œผ๋กœ์จ ์•…์šฉ๋  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. flexible-server์— ์‚ฌ์šฉ์ž๊ฐ€ ํ• ๋‹น๋œ ๊ด€๋ฆฌ ID๊ฐ€ ์žˆ์–ด์•ผ ํ•ฉ๋‹ˆ๋‹ค. {% code overflow="wrap" %} ```bash @@ -75,17 +63,4 @@ az mysql flexible-server ad-admin create \ ``` {% endcode %} -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**๋””์Šค์ฝ”๋“œ ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **ํŠธ์œ„ํ„ฐ** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} diff --git a/src/pentesting-cloud/azure-security/az-privilege-escalation/az-postgresql-privesc.md b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-postgresql-privesc.md index 92b5e1341..e576ccbb2 100644 --- a/src/pentesting-cloud/azure-security/az-privilege-escalation/az-postgresql-privesc.md +++ b/src/pentesting-cloud/azure-security/az-privilege-escalation/az-postgresql-privesc.md @@ -1,22 +1,9 @@ # Az - PostgreSQL Privesc -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**๋””์Šค์ฝ”๋“œ ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **ํŠธ์œ„ํ„ฐ** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} ## PostgreSQL Privesc -SQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์— ๋Œ€ํ•œ ์ž์„ธํ•œ ์ •๋ณด๋Š” ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: +SQL ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์— ๋Œ€ํ•œ ์ž์„ธํ•œ ๋‚ด์šฉ์€ ๋‹ค์Œ์„ ํ™•์ธํ•˜์„ธ์š”: {% content-ref url="../az-services/az-postgresql.md" %} [az-postgresql.md](../az-services/az-postgresql.md) @@ -64,7 +51,7 @@ az postgres flexible-server update --resource-group --serv ์ด ๊ถŒํ•œ์„ ์‚ฌ์šฉํ•˜๋ฉด PostgreSQL Flexible Server์— ๋Œ€ํ•œ Azure Active Directory (AD) ๊ด€๋ฆฌ์ž๋ฅผ ๊ตฌ์„ฑํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์ด๋Š” ์ž์‹  ๋˜๋Š” ๋‹ค๋ฅธ ๊ณ„์ •์„ AD ๊ด€๋ฆฌ์ž์œผ๋กœ ์„ค์ •ํ•˜์—ฌ PostgreSQL ์„œ๋ฒ„์— ๋Œ€ํ•œ ์ „์ฒด ๊ด€๋ฆฌ ๊ถŒํ•œ์„ ๋ถ€์—ฌํ•จ์œผ๋กœ์จ ์•…์šฉ๋  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ๊ธฐ์กด ์ฃผ์ฒด๋ฅผ ์—…๋ฐ์ดํŠธํ•˜๋Š” ๊ฒƒ์€ ์•„์ง ์ง€์›๋˜์ง€ ์•Š์œผ๋ฏ€๋กœ, ์ƒ์„ฑ๋œ ๊ฒƒ์ด ์žˆ๋‹ค๋ฉด ๋จผ์ € ์‚ญ์ œํ•ด์•ผ ํ•ฉ๋‹ˆ๋‹ค. -์œ ์—ฐํ•œ ์„œ๋ฒ„์— ์‚ฌ์šฉ์ž๊ฐ€ ํ• ๋‹น๋œ ๊ด€๋ฆฌ ID๊ฐ€ ์žˆ์–ด์•ผ ํ•˜๋Š” ๊ฒƒ์ด ์ค‘์š”ํ•ฉ๋‹ˆ๋‹ค. +์œ ์—ฐํ•œ ์„œ๋ฒ„์— ์‚ฌ์šฉ์ž ํ• ๋‹น ๊ด€๋ฆฌ ID๊ฐ€ ์žˆ์–ด์•ผ ํ•œ๋‹ค๋Š” ๊ฒƒ์ด ์ค‘์š”ํ•ฉ๋‹ˆ๋‹ค. {% code overflow="wrap" %} ```bash @@ -77,17 +64,4 @@ az postgres flexible-server ad-admin create \ ``` {% endcode %} -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**๋””์Šค์ฝ”๋“œ ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **ํŠธ์œ„ํ„ฐ** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} diff --git a/src/pentesting-cloud/azure-security/az-services/az-cloud-shell.md b/src/pentesting-cloud/azure-security/az-services/az-cloud-shell.md index 70169c935..8e68b0475 100644 --- a/src/pentesting-cloud/azure-security/az-services/az-cloud-shell.md +++ b/src/pentesting-cloud/azure-security/az-services/az-cloud-shell.md @@ -1,23 +1,10 @@ # Az - Cloud Shell -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**Discord ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) GitHub ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} ## Azure Cloud Shell -**Azure Cloud Shell**์€ Azure ๋ฆฌ์†Œ์Šค๋ฅผ ๊ด€๋ฆฌํ•˜๊ธฐ ์œ„ํ•ด ์„ค๊ณ„๋œ ๋Œ€ํ™”ํ˜• ์ธ์ฆ ๋ธŒ๋ผ์šฐ์ € ์ ‘๊ทผ ํ„ฐ๋ฏธ๋„๋กœ, Bash ๋˜๋Š” PowerShell ์ค‘ ํ•˜๋‚˜๋ฅผ ์„ ํƒํ•˜์—ฌ ์ž‘์—…ํ•  ์ˆ˜ ์žˆ๋Š” ์œ ์—ฐ์„ฑ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. ์ด ์„œ๋น„์Šค๋Š” ๋น„ํ™œ์„ฑ ์ƒํƒœ๊ฐ€ 20๋ถ„์ด ์ง€๋‚˜๋ฉด ํƒ€์ž„์•„์›ƒ๋˜๋Š” ์ž„์‹œ ์„ธ์…˜ ํ˜ธ์ŠคํŠธ์—์„œ ์‹คํ–‰๋˜๋ฉฐ, $HOME ์œ„์น˜์— 5-GB ํŒŒ์ผ ๊ณต์œ ๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ํŒŒ์ผ์„ ์œ ์ง€ํ•ฉ๋‹ˆ๋‹ค. Cloud Shell์€ Azure ํฌํ„ธ, shell.azure.com, Azure CLI ๋ฐ PowerShell ๋ฌธ์„œ, Azure ๋ชจ๋ฐ”์ผ ์•ฑ, Visual Studio Code Azure ๊ณ„์ • ํ™•์žฅ ๋“ฑ ์—ฌ๋Ÿฌ ๊ฒฝ๋กœ๋ฅผ ํ†ตํ•ด ์ ‘๊ทผํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. +**Azure Cloud Shell**๋Š” Azure ๋ฆฌ์†Œ์Šค๋ฅผ ๊ด€๋ฆฌํ•˜๊ธฐ ์œ„ํ•ด ์„ค๊ณ„๋œ ๋Œ€ํ™”ํ˜• ์ธ์ฆ ๋ธŒ๋ผ์šฐ์ € ์ ‘๊ทผ ํ„ฐ๋ฏธ๋„๋กœ, Bash ๋˜๋Š” PowerShell ์ค‘ ํ•˜๋‚˜๋กœ ์ž‘์—…ํ•  ์ˆ˜ ์žˆ๋Š” ์œ ์—ฐ์„ฑ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. ์ด ํ„ฐ๋ฏธ๋„์€ ๋น„ํ™œ์„ฑ ์ƒํƒœ๊ฐ€ 20๋ถ„ ์ง€์†๋œ ํ›„ ํƒ€์ž„์•„์›ƒ๋˜๋Š” ์ž„์‹œ ์„ธ์…˜ ํ˜ธ์ŠคํŠธ์—์„œ ์‹คํ–‰๋˜๋ฉฐ, $HOME ์œ„์น˜์— 5-GB ํŒŒ์ผ ๊ณต์œ ๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ํŒŒ์ผ์„ ์œ ์ง€ํ•ฉ๋‹ˆ๋‹ค. Cloud Shell์€ Azure ํฌํ„ธ, shell.azure.com, Azure CLI ๋ฐ PowerShell ๋ฌธ์„œ, Azure ๋ชจ๋ฐ”์ผ ์•ฑ, Visual Studio Code Azure ๊ณ„์ • ํ™•์žฅ ๋“ฑ ์—ฌ๋Ÿฌ ์ง€์ ์„ ํ†ตํ•ด ์ ‘๊ทผํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์ด ์„œ๋น„์Šค์—๋Š” ๊ถŒํ•œ์ด ํ• ๋‹น๋˜์ง€ ์•Š์œผ๋ฏ€๋กœ ๊ถŒํ•œ ์ƒ์Šน ๊ธฐ์ˆ ์ด ์—†์Šต๋‹ˆ๋‹ค. ๋˜ํ•œ ์–ด๋–ค ์ข…๋ฅ˜์˜ ์—ด๊ฑฐ๋„ ์—†์Šต๋‹ˆ๋‹ค. @@ -25,34 +12,20 @@ GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**Discord ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) GitHub ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} diff --git a/src/pentesting-cloud/azure-security/az-services/az-cosmosDB.md b/src/pentesting-cloud/azure-security/az-services/az-cosmosDB.md index 372700b23..a34d49bf7 100644 --- a/src/pentesting-cloud/azure-security/az-services/az-cosmosDB.md +++ b/src/pentesting-cloud/azure-security/az-services/az-cosmosDB.md @@ -1,27 +1,14 @@ # Az - CosmosDB -{% hint style="success" %} -Learn & practice AWS Hacking:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -Learn & practice GCP Hacking: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -Support HackTricks - -* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)! -* **Join the** ๐Ÿ’ฌ [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.** -* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos. - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} ## Azure CosmosDB **Azure Cosmos DB**๋Š” ๋‹จ์ผ ๋ฐ€๋ฆฌ์ดˆ ์‘๋‹ต ์‹œ๊ฐ„, ์ž๋™ ํ™•์žฅ์„ฑ ๋ฐ ๊ธฐ์—… ์ˆ˜์ค€์˜ ๋ณด์•ˆ์ด ๋ณด์žฅ๋œ SLA ๊ธฐ๋ฐ˜ ๊ฐ€์šฉ์„ฑ์„ ์ œ๊ณตํ•˜๋Š” ์™„์ „ ๊ด€๋ฆฌํ˜• **NoSQL, ๊ด€๊ณ„ํ˜• ๋ฐ ๋ฒกํ„ฐ ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค**์ž…๋‹ˆ๋‹ค. ์ด๋Š” ๋‹ค์ค‘ ์ง€์—ญ ๋ฐ์ดํ„ฐ ๋ฐฐํฌ, ์˜คํ”ˆ ์†Œ์Šค API, ์ธ๊ธฐ ์žˆ๋Š” ์–ธ์–ด๋ฅผ ์œ„ํ•œ SDK ๋ฐ ํ†ตํ•ฉ ๋ฒกํ„ฐ ์ง€์›๊ณผ ์›ํ™œํ•œ Azure AI ํ†ตํ•ฉ๊ณผ ๊ฐ™์€ AI ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ๊ธฐ๋Šฅ์„ ํ†ตํ•ด ๋” ๋น ๋ฅธ ์•ฑ ๊ฐœ๋ฐœ์„ ๊ฐ€๋Šฅํ•˜๊ฒŒ ํ•ฉ๋‹ˆ๋‹ค. -Azure Cosmos DB๋Š” ๋ฌธ์„œ, ๊ด€๊ณ„ํ˜•, ํ‚ค-๊ฐ’, ๊ทธ๋ž˜ํ”„ ๋ฐ ์—ด ํŒจ๋ฐ€๋ฆฌ ๋ฐ์ดํ„ฐ ๋ชจ๋ธ์„ ์‚ฌ์šฉํ•˜์—ฌ ์‹ค์ œ ๋ฐ์ดํ„ฐ๋ฅผ ๋ชจ๋ธ๋งํ•˜๊ธฐ ์œ„ํ•œ ์—ฌ๋Ÿฌ ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค API๋ฅผ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. ์ด API๋Š” NoSQL, MongoDB, PostgreSQL, Cassandra, Gremlin ๋ฐ Table์ž…๋‹ˆ๋‹ค. +Azure Cosmos DB๋Š” ๋ฌธ์„œ, ๊ด€๊ณ„ํ˜•, ํ‚ค-๊ฐ’, ๊ทธ๋ž˜ํ”„ ๋ฐ ์—ด ํŒจ๋ฐ€๋ฆฌ ๋ฐ์ดํ„ฐ ๋ชจ๋ธ์„ ์‚ฌ์šฉํ•˜์—ฌ ์‹ค์ œ ๋ฐ์ดํ„ฐ๋ฅผ ๋ชจ๋ธ๋งํ•˜๊ธฐ ์œ„ํ•ด ์—ฌ๋Ÿฌ ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค API๋ฅผ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. ์ด API๋Š” NoSQL, MongoDB, PostgreSQL, Cassandra, Gremlin ๋ฐ Table์ž…๋‹ˆ๋‹ค. -CosmosDB์˜ ์ฃผ์š” ์ธก๋ฉด ์ค‘ ํ•˜๋‚˜๋Š” Azure Cosmos Account์ž…๋‹ˆ๋‹ค. **Azure Cosmos Account**๋Š” ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์— ๋Œ€ํ•œ ์ง„์ž…์  ์—ญํ• ์„ ํ•ฉ๋‹ˆ๋‹ค. ๊ณ„์ •์€ ๊ธ€๋กœ๋ฒŒ ๋ฐฐํฌ, ์ผ๊ด€์„ฑ ์ˆ˜์ค€ ๋ฐ ์‚ฌ์šฉํ•  ํŠน์ • API(์˜ˆ: NoSQL)์™€ ๊ฐ™์€ ์ฃผ์š” ์„ค์ •์„ ๊ฒฐ์ •ํ•ฉ๋‹ˆ๋‹ค. ๊ณ„์ •์„ ํ†ตํ•ด ์—ฌ๋Ÿฌ ์ง€์—ญ์—์„œ ๋ฐ์ดํ„ฐ์— ๋Œ€ํ•œ ์ €์ง€์—ฐ ์•ก์„ธ์Šค๋ฅผ ๋ณด์žฅํ•˜๊ธฐ ์œ„ํ•ด ๊ธ€๋กœ๋ฒŒ ๋ณต์ œ๋ฅผ ๊ตฌ์„ฑํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ๋˜ํ•œ ์„ฑ๋Šฅ๊ณผ ๋ฐ์ดํ„ฐ ์ •ํ™•์„ฑ ๊ฐ„์˜ ๊ท ํ˜•์„ ๋งž์ถ”๋Š” ์ผ๊ด€์„ฑ ์ˆ˜์ค€์„ ์„ ํƒํ•  ์ˆ˜ ์žˆ์œผ๋ฉฐ, ๊ฐ•๋ ฅํ•œ ์ผ๊ด€์„ฑ์—์„œ ์ตœ์ข… ์ผ๊ด€์„ฑ๊นŒ์ง€์˜ ์˜ต์…˜์ด ์ œ๊ณต๋ฉ๋‹ˆ๋‹ค. +CosmosDB์˜ ์ฃผ์š” ์ธก๋ฉด ์ค‘ ํ•˜๋‚˜๋Š” Azure Cosmos Account์ž…๋‹ˆ๋‹ค. **Azure Cosmos Account**๋Š” ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์— ๋Œ€ํ•œ ์ง„์ž…์  ์—ญํ• ์„ ํ•ฉ๋‹ˆ๋‹ค. ๊ณ„์ •์€ ๊ธ€๋กœ๋ฒŒ ๋ฐฐํฌ, ์ผ๊ด€์„ฑ ์ˆ˜์ค€ ๋ฐ ์‚ฌ์šฉํ•  ํŠน์ • API(์˜ˆ: NoSQL)์™€ ๊ฐ™์€ ์ฃผ์š” ์„ค์ •์„ ๊ฒฐ์ •ํ•ฉ๋‹ˆ๋‹ค. ๊ณ„์ •์„ ํ†ตํ•ด ์—ฌ๋Ÿฌ ์ง€์—ญ์—์„œ ๋ฐ์ดํ„ฐ์— ๋Œ€ํ•œ ์ €์ง€์—ฐ ์•ก์„ธ์Šค๋ฅผ ๋ณด์žฅํ•˜๊ธฐ ์œ„ํ•ด ๊ธ€๋กœ๋ฒŒ ๋ณต์ œ๋ฅผ ๊ตฌ์„ฑํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ๋˜ํ•œ ์„ฑ๋Šฅ๊ณผ ๋ฐ์ดํ„ฐ ์ •ํ™•์„ฑ ๊ฐ„์˜ ๊ท ํ˜•์„ ๋งž์ถ”๋Š” ์ผ๊ด€์„ฑ ์ˆ˜์ค€์„ ์„ ํƒํ•  ์ˆ˜ ์žˆ์œผ๋ฉฐ, ์˜ต์…˜์€ Strong์—์„œ Eventual consistency๊นŒ์ง€ ๋‹ค์–‘ํ•ฉ๋‹ˆ๋‹ค. ### NoSQL (sql) Azure Cosmos DB NoSQL API๋Š” JSON์„ ๋ฐ์ดํ„ฐ ํ˜•์‹์œผ๋กœ ์‚ฌ์šฉํ•˜๋Š” ๋ฌธ์„œ ๊ธฐ๋ฐ˜ API์ž…๋‹ˆ๋‹ค. JSON ๊ฐ์ฒด๋ฅผ ์ฟผ๋ฆฌํ•˜๊ธฐ ์œ„ํ•œ SQL ์œ ์‚ฌ ์ฟผ๋ฆฌ ๊ตฌ๋ฌธ์„ ์ œ๊ณตํ•˜์—ฌ ๊ตฌ์กฐํ™”๋œ ๋ฐ์ดํ„ฐ ๋ฐ ๋ฐ˜๊ตฌ์กฐํ™”๋œ ๋ฐ์ดํ„ฐ ์ž‘์—…์— ์ ํ•ฉํ•ฉ๋‹ˆ๋‹ค. ์„œ๋น„์Šค์˜ ์—”๋“œํฌ์ธํŠธ๋Š” ๋‹ค์Œ๊ณผ ๊ฐ™์Šต๋‹ˆ๋‹ค: @@ -36,7 +23,7 @@ https://.documents.azure.com:443/ ๊ณ„์ • ๋‚ด์—์„œ ํ•˜๋‚˜ ์ด์ƒ์˜ ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค๋ฅผ ์ƒ์„ฑํ•  ์ˆ˜ ์žˆ์œผ๋ฉฐ, ์ด๋Š” ์ปจํ…Œ์ด๋„ˆ์˜ ๋…ผ๋ฆฌ์  ๊ทธ๋ฃน์œผ๋กœ ์ž‘์šฉํ•ฉ๋‹ˆ๋‹ค. ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค๋Š” ๋ฆฌ์†Œ์Šค ๊ด€๋ฆฌ ๋ฐ ์‚ฌ์šฉ์ž ๊ถŒํ•œ์˜ ๊ฒฝ๊ณ„ ์—ญํ• ์„ ํ•ฉ๋‹ˆ๋‹ค. ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค๋Š” ์ปจํ…Œ์ด๋„ˆ ๊ฐ„์— ํ”„๋กœ๋น„์ €๋‹๋œ ์ฒ˜๋ฆฌ๋Ÿ‰์„ ๊ณต์œ ํ•˜๊ฑฐ๋‚˜ ๊ฐœ๋ณ„ ์ปจํ…Œ์ด๋„ˆ์— ์ „์šฉ ์ฒ˜๋ฆฌ๋Ÿ‰์„ ํ• ๋‹นํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. #### ์ปจํ…Œ์ด๋„ˆ -๋ฐ์ดํ„ฐ ์ €์žฅ์˜ ํ•ต์‹ฌ ๋‹จ์œ„๋Š” ์ปจํ…Œ์ด๋„ˆ๋กœ, JSON ๋ฌธ์„œ๋ฅผ ๋ณด์œ ํ•˜๊ณ  ์žˆ์œผ๋ฉฐ ํšจ์œจ์ ์ธ ์ฟผ๋ฆฌ๋ฅผ ์œ„ํ•ด ์ž๋™์œผ๋กœ ์ธ๋ฑ์‹ฑ๋ฉ๋‹ˆ๋‹ค. ์ปจํ…Œ์ด๋„ˆ๋Š” ํƒ„๋ ฅ์ ์œผ๋กœ ํ™•์žฅ ๊ฐ€๋Šฅํ•˜๋ฉฐ, ์‚ฌ์šฉ์ž ์ •์˜ ํŒŒํ‹ฐ์…˜ ํ‚ค์— ์˜ํ•ด ๊ฒฐ์ •๋˜๋Š” ํŒŒํ‹ฐ์…˜์— ๋ถ„์‚ฐ๋ฉ๋‹ˆ๋‹ค. ํŒŒํ‹ฐ์…˜ ํ‚ค๋Š” ์ตœ์ ์˜ ์„ฑ๋Šฅ๊ณผ ๊ณ ๋ฅธ ๋ฐ์ดํ„ฐ ๋ถ„ํฌ๋ฅผ ๋ณด์žฅํ•˜๋Š” ๋ฐ ์ค‘์š”ํ•ฉ๋‹ˆ๋‹ค. ์˜ˆ๋ฅผ ๋“ค์–ด, ์ปจํ…Œ์ด๋„ˆ๋Š” ๊ณ ๊ฐ ๋ฐ์ดํ„ฐ๋ฅผ ์ €์žฅํ•  ์ˆ˜ ์žˆ์œผ๋ฉฐ, "customerId"๊ฐ€ ํŒŒํ‹ฐ์…˜ ํ‚ค๋กœ ์‚ฌ์šฉ๋  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. +๋ฐ์ดํ„ฐ ์ €์žฅ์˜ ํ•ต์‹ฌ ๋‹จ์œ„๋Š” ์ปจํ…Œ์ด๋„ˆ๋กœ, JSON ๋ฌธ์„œ๋ฅผ ๋ณด์œ ํ•˜๊ณ  ์žˆ์œผ๋ฉฐ ํšจ์œจ์ ์ธ ์ฟผ๋ฆฌ๋ฅผ ์œ„ํ•ด ์ž๋™์œผ๋กœ ์ธ๋ฑ์‹ฑ๋ฉ๋‹ˆ๋‹ค. ์ปจํ…Œ์ด๋„ˆ๋Š” ํƒ„๋ ฅ์ ์œผ๋กœ ํ™•์žฅ ๊ฐ€๋Šฅํ•˜๋ฉฐ, ์‚ฌ์šฉ์ž ์ •์˜ ํŒŒํ‹ฐ์…˜ ํ‚ค์— ์˜ํ•ด ๊ฒฐ์ •๋œ ํŒŒํ‹ฐ์…˜์— ๋ถ„์‚ฐ๋ฉ๋‹ˆ๋‹ค. ํŒŒํ‹ฐ์…˜ ํ‚ค๋Š” ์ตœ์ ์˜ ์„ฑ๋Šฅ๊ณผ ๊ณ ๋ฅธ ๋ฐ์ดํ„ฐ ๋ถ„ํฌ๋ฅผ ๋ณด์žฅํ•˜๋Š” ๋ฐ ์ค‘์š”ํ•ฉ๋‹ˆ๋‹ค. ์˜ˆ๋ฅผ ๋“ค์–ด, ์ปจํ…Œ์ด๋„ˆ๋Š” "customerId"๋ฅผ ํŒŒํ‹ฐ์…˜ ํ‚ค๋กœ ํ•˜์—ฌ ๊ณ ๊ฐ ๋ฐ์ดํ„ฐ๋ฅผ ์ €์žฅํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. #### ์—ด๊ฑฐ @@ -347,23 +334,10 @@ print(f"Inserted document with ID: {result.inserted_id}") ## ToDo -* ์—ฌ๊ธฐ DB์˜ ๋‚˜๋จธ์ง€, ํ…Œ์ด๋ธ”, ์นด์‚ฐ๋“œ๋ผ, ๊ทธ๋ ˜๋ฆฐ... +* ์—ฌ๊ธฐ DB์˜ ๋‚˜๋จธ์ง€ ๋ถ€๋ถ„, ํ…Œ์ด๋ธ”, ์นด์‚ฐ๋“œ๋ผ, ๊ทธ๋ ˜๋ฆฐ... * ํฌ์ŠคํŠธ ์ต์Šคํ”Œ๋กœ์ž‡ "Microsoft.DocumentDB/databaseAccounts/mongodbUserDefinitions/write" && "Microsoft.DocumentDB/databaseAccounts/mongodbUserDefinitions/read" ๋ฐ ์—ญํ•  ์ •์˜๋ฅผ ์‚ดํŽด๋ณด์„ธ์š”. ์—ฌ๊ธฐ์„œ ๊ถŒํ•œ ์ƒ์Šน์ด ์žˆ์„ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. -* ๋ณต์› ์‚ฌํ•ญ์„ ์‚ดํŽด๋ณด์„ธ์š”. +* ๋ณต์› ์‚ดํŽด๋ณด๊ธฐ -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ณ  ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ณ  ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**๋””์Šค์ฝ”๋“œ ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **ํŠธ์œ„ํ„ฐ** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŠธ๋ฆญ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} diff --git a/src/pentesting-cloud/azure-security/az-services/az-logic-apps.md b/src/pentesting-cloud/azure-security/az-services/az-logic-apps.md index b82b3b5a7..6f80608ab 100644 --- a/src/pentesting-cloud/azure-security/az-services/az-logic-apps.md +++ b/src/pentesting-cloud/azure-security/az-services/az-logic-apps.md @@ -6,12 +6,12 @@ Azure Logic Apps๋Š” Microsoft Azure์—์„œ ์ œ๊ณตํ•˜๋Š” ํด๋ผ์šฐ๋“œ ๊ธฐ๋ฐ˜ ์„œ๋น„์Šค๋กœ, ๊ฐœ๋ฐœ์ž๊ฐ€ **๋‹ค์–‘ํ•œ ์„œ๋น„์Šค**, ๋ฐ์ดํ„ฐ ์†Œ์Šค ๋ฐ ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜์„ ํ†ตํ•ฉํ•˜๋Š” ์›Œํฌํ”Œ๋กœ๋ฅผ **์ƒ์„ฑํ•˜๊ณ  ์‹คํ–‰**ํ•  ์ˆ˜ ์žˆ๊ฒŒ ํ•ด์ค๋‹ˆ๋‹ค. ์ด๋Ÿฌํ•œ ์›Œํฌํ”Œ๋กœ๋Š” **๋น„์ฆˆ๋‹ˆ์Šค ํ”„๋กœ์„ธ์Šค๋ฅผ ์ž๋™ํ™”**ํ•˜๊ณ , ์ž‘์—…์„ ์กฐ์ •ํ•˜๋ฉฐ, ๋‹ค์–‘ํ•œ ํ”Œ๋žซํผ ๊ฐ„์˜ ๋ฐ์ดํ„ฐ ํ†ตํ•ฉ์„ ์ˆ˜ํ–‰ํ•˜๋„๋ก ์„ค๊ณ„๋˜์—ˆ์Šต๋‹ˆ๋‹ค. -Logic Apps๋Š” **๊ด‘๋ฒ”์œ„ํ•œ ์‚ฌ์ „ ๊ตฌ์ถ•๋œ ์ปค๋„ฅํ„ฐ**๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ์›Œํฌํ”Œ๋กœ๋ฅผ ์ƒ์„ฑํ•  ์ˆ˜ ์žˆ๋Š” ์‹œ๊ฐ์  ๋””์ž์ด๋„ˆ๋ฅผ ์ œ๊ณตํ•˜๋ฉฐ, ์ด๋ฅผ ํ†ตํ•ด Office 365, Dynamics CRM, Salesforce ๋“ฑ ๋‹ค์–‘ํ•œ ์„œ๋น„์Šค์— ์‰ฝ๊ฒŒ ์—ฐ๊ฒฐํ•˜๊ณ  ์ƒํ˜ธ์ž‘์šฉํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ๋˜ํ•œ ํŠน์ • ์š”๊ตฌ์— ๋งž๋Š” ์‚ฌ์šฉ์ž ์ •์˜ ์ปค๋„ฅํ„ฐ๋ฅผ ์ƒ์„ฑํ•  ์ˆ˜๋„ ์žˆ์Šต๋‹ˆ๋‹ค. +Logic Apps๋Š” **๊ด‘๋ฒ”์œ„ํ•œ ์‚ฌ์ „ ๊ตฌ์ถ•๋œ ์ปค๋„ฅํ„ฐ**๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ์›Œํฌํ”Œ๋กœ๋ฅผ ์ƒ์„ฑํ•  ์ˆ˜ ์žˆ๋Š” ์‹œ๊ฐ์  ๋””์ž์ด๋„ˆ๋ฅผ ์ œ๊ณตํ•˜๋ฏ€๋กœ, Office 365, Dynamics CRM, Salesforce ๋“ฑ ๋‹ค์–‘ํ•œ ์„œ๋น„์Šค์— ์‰ฝ๊ฒŒ ์—ฐ๊ฒฐํ•˜๊ณ  ์ƒํ˜ธ์ž‘์šฉํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ๋˜ํ•œ ํŠน์ • ์š”๊ตฌ์— ๋งž๋Š” ์‚ฌ์šฉ์ž ์ •์˜ ์ปค๋„ฅํ„ฐ๋ฅผ ์ƒ์„ฑํ•  ์ˆ˜๋„ ์žˆ์Šต๋‹ˆ๋‹ค. ### ์˜ˆ์‹œ - **๋ฐ์ดํ„ฐ ํŒŒ์ดํ”„๋ผ์ธ ์ž๋™ํ™”**: Logic Apps๋Š” Azure Data Factory์™€ ๊ฒฐํ•ฉํ•˜์—ฌ **๋ฐ์ดํ„ฐ ์ „์†ก ๋ฐ ๋ณ€ํ™˜ ํ”„๋กœ์„ธ์Šค**๋ฅผ ์ž๋™ํ™”ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์ด๋Š” Azure SQL Database์™€ Azure Blob Storage์™€ ๊ฐ™์€ ๋‹ค์–‘ํ•œ ๋ฐ์ดํ„ฐ ์ €์žฅ์†Œ ๊ฐ„์— ๋ฐ์ดํ„ฐ๋ฅผ ์ด๋™ํ•˜๊ณ  ๋ณ€ํ™˜ํ•˜๋Š” ํ™•์žฅ ๊ฐ€๋Šฅํ•˜๊ณ  ์‹ ๋ขฐํ•  ์ˆ˜ ์žˆ๋Š” ๋ฐ์ดํ„ฐ ํŒŒ์ดํ”„๋ผ์ธ์„ ์ƒ์„ฑํ•˜๋Š” ๋ฐ ์œ ์šฉํ•˜๋ฉฐ, ๋ถ„์„ ๋ฐ ๋น„์ฆˆ๋‹ˆ์Šค ์ธํ…”๋ฆฌ์ „์Šค ์ž‘์—…์— ๋„์›€์„ ์ค๋‹ˆ๋‹ค. -- **Azure Functions์™€ ํ†ตํ•ฉ**: Logic Apps๋Š” Azure Functions์™€ ํ•จ๊ป˜ ์ž‘๋™ํ•˜์—ฌ **ํ•„์š”์— ๋”ฐ๋ผ ํ™•์žฅ๋˜๋Š” ์ •๊ตํ•œ ์ด๋ฒคํŠธ ๊ธฐ๋ฐ˜ ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜์„ ๊ฐœ๋ฐœ**ํ•˜๊ณ  ๋‹ค๋ฅธ Azure ์„œ๋น„์Šค์™€ ์›ํ™œํ•˜๊ฒŒ ํ†ตํ•ฉํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์‚ฌ์šฉ ์‚ฌ๋ก€์˜ ์˜ˆ๋กœ๋Š” Logic App์„ ์‚ฌ์šฉํ•˜์—ฌ Azure Storage ๊ณ„์ •์˜ ๋ณ€๊ฒฝ๊ณผ ๊ฐ™์€ ํŠน์ • ์ด๋ฒคํŠธ์— ์‘๋‹ตํ•˜์—ฌ Azure Function์„ ํŠธ๋ฆฌ๊ฑฐํ•˜๋Š” ๊ฒƒ์ž…๋‹ˆ๋‹ค. ์ด๋ฅผ ํ†ตํ•ด ๋™์  ๋ฐ์ดํ„ฐ ์ฒ˜๋ฆฌ๊ฐ€ ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๋‹ค. +- **Azure Functions์™€ ํ†ตํ•ฉ**: Logic Apps๋Š” Azure Functions์™€ ํ•จ๊ป˜ ์ž‘๋™ํ•˜์—ฌ **ํ•„์š”์— ๋”ฐ๋ผ ํ™•์žฅ๋˜๋Š” ์ •๊ตํ•œ ์ด๋ฒคํŠธ ๊ธฐ๋ฐ˜ ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜์„ ๊ฐœ๋ฐœ**ํ•˜๊ณ  ๋‹ค๋ฅธ Azure ์„œ๋น„์Šค์™€ ์›ํ™œํ•˜๊ฒŒ ํ†ตํ•ฉํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ์‚ฌ์šฉ ์‚ฌ๋ก€์˜ ์˜ˆ๋กœ๋Š” Logic App์„ ์‚ฌ์šฉํ•˜์—ฌ Azure Storage ๊ณ„์ •์˜ ๋ณ€๊ฒฝ๊ณผ ๊ฐ™์€ ํŠน์ • ์ด๋ฒคํŠธ์— ์‘๋‹ตํ•˜์—ฌ Azure Function์„ ํŠธ๋ฆฌ๊ฑฐํ•˜๋Š” ๊ฒƒ์ด ์žˆ์œผ๋ฉฐ, ์ด๋ฅผ ํ†ตํ•ด ๋™์  ๋ฐ์ดํ„ฐ ์ฒ˜๋ฆฌ๊ฐ€ ๊ฐ€๋Šฅํ•ฉ๋‹ˆ๋‹ค. ### LogicAPP ์‹œ๊ฐํ™” @@ -37,9 +37,9 @@ curl -XPOST 'https://prod-44.westus.logic.azure.com:443/workflows/2d8de4be6e9741 * **์†Œ๋น„ํ˜•** - **๋‹ค์ค‘ ํ…Œ๋„ŒํŠธ**: ๊ณต์œ  ์ปดํ“จํŒ… ๋ฆฌ์†Œ์Šค๋ฅผ ์ œ๊ณตํ•˜๋ฉฐ, ํผ๋ธ”๋ฆญ ํด๋ผ์šฐ๋“œ์—์„œ ์šด์˜๋˜๊ณ , ์ž‘์—…๋‹น ์š”๊ธˆ ๋ชจ๋ธ์„ ๋”ฐ๋ฆ…๋‹ˆ๋‹ค. ์ด๋Š” ๊ฒฝ๋Ÿ‰ ๋ฐ ๋น„์šฉ ํšจ์œจ์ ์ธ ์ž‘์—…์— ์ด์ƒ์ ์ž…๋‹ˆ๋‹ค. * **ํ‘œ์ค€** -- **์›Œํฌํ”Œ๋กœ์šฐ ์„œ๋น„์Šค ๊ณ„ํš**: ๋„คํŠธ์›Œํ‚น์„ ์œ„ํ•œ VNET ํ†ตํ•ฉ์ด ์žˆ๋Š” ์ „์šฉ ์ปดํ“จํŒ… ๋ฆฌ์†Œ์Šค์™€ ์›Œํฌํ”Œ๋กœ์šฐ ์„œ๋น„์Šค ๊ณ„ํš ์ธ์Šคํ„ด์Šค๋‹น ์š”๊ธˆ์„ ๋ถ€๊ณผํ•ฉ๋‹ˆ๋‹ค. ์ด๋Š” ๋” ๋งŽ์€ ์ œ์–ด๊ฐ€ ํ•„์š”ํ•œ ์š”๊ตฌ๊ฐ€ ๋งŽ์€ ์ž‘์—…์— ์ ํ•ฉํ•ฉ๋‹ˆ๋‹ค. +- **์›Œํฌํ”Œ๋กœ์šฐ ์„œ๋น„์Šค ๊ณ„ํš**: ๋„คํŠธ์›Œํ‚น์„ ์œ„ํ•œ VNET ํ†ตํ•ฉ์ด ์žˆ๋Š” ์ „์šฉ ์ปดํ“จํŒ… ๋ฆฌ์†Œ์Šค์™€ ์›Œํฌํ”Œ๋กœ์šฐ ์„œ๋น„์Šค ๊ณ„ํš ์ธ์Šคํ„ด์Šค๋‹น ์š”๊ธˆ์„ ๋ถ€๊ณผํ•ฉ๋‹ˆ๋‹ค. ์ด๋Š” ๋” ๋งŽ์€ ์ œ์–ด๊ฐ€ ํ•„์š”ํ•œ ์š”๊ตฌ๊ฐ€ ๋†’์€ ์ž‘์—…์— ์ ํ•ฉํ•ฉ๋‹ˆ๋‹ค. - **์•ฑ ์„œ๋น„์Šค ํ™˜๊ฒฝ V3**: ์™„์ „ํ•œ ๊ฒฉ๋ฆฌ ๋ฐ ํ™•์žฅ์„ฑ์„ ๊ฐ–์ถ˜ ์ „์šฉ ์ปดํ“จํŒ… ๋ฆฌ์†Œ์Šค์ž…๋‹ˆ๋‹ค. ๋˜ํ•œ ๋„คํŠธ์›Œํ‚น์„ ์œ„ํ•ด VNET๊ณผ ํ†ตํ•ฉ๋˜๋ฉฐ, ํ™˜๊ฒฝ ๋‚ด์˜ ์•ฑ ์„œ๋น„์Šค ์ธ์Šคํ„ด์Šค๋ฅผ ๊ธฐ๋ฐ˜์œผ๋กœ ํ•œ ์š”๊ธˆ ๋ชจ๋ธ์„ ์‚ฌ์šฉํ•ฉ๋‹ˆ๋‹ค. ์ด๋Š” ๋†’์€ ๊ฒฉ๋ฆฌ๊ฐ€ ํ•„์š”ํ•œ ๊ธฐ์—… ๊ทœ๋ชจ์˜ ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜์— ์ด์ƒ์ ์ž…๋‹ˆ๋‹ค. -- **ํ•˜์ด๋ธŒ๋ฆฌ๋“œ**: ๋กœ์ปฌ ์ฒ˜๋ฆฌ ๋ฐ ๋‹ค์ค‘ ํด๋ผ์šฐ๋“œ ์ง€์›์„ ์œ„ํ•ด ์„ค๊ณ„๋˜์—ˆ์Šต๋‹ˆ๋‹ค. ๊ณ ๊ฐ ๊ด€๋ฆฌํ˜• ์ปดํ“จํŒ… ๋ฆฌ์†Œ์Šค๋ฅผ ๋กœ์ปฌ ๋„คํŠธ์›Œํฌ ์ ‘๊ทผ๊ณผ ํ•จ๊ป˜ ํ—ˆ์šฉํ•˜๋ฉฐ, Kubernetes ์ด๋ฒคํŠธ ๊ธฐ๋ฐ˜ ์ž๋™ ํ™•์žฅ(KEDA)์„ ํ™œ์šฉํ•ฉ๋‹ˆ๋‹ค. +- **ํ•˜์ด๋ธŒ๋ฆฌ๋“œ**: ๋กœ์ปฌ ์ฒ˜๋ฆฌ ๋ฐ ๋‹ค์ค‘ ํด๋ผ์šฐ๋“œ ์ง€์›์„ ์œ„ํ•ด ์„ค๊ณ„๋˜์—ˆ์Šต๋‹ˆ๋‹ค. ๊ณ ๊ฐ ๊ด€๋ฆฌ ์ปดํ“จํŒ… ๋ฆฌ์†Œ์Šค๋ฅผ ๋กœ์ปฌ ๋„คํŠธ์›Œํฌ ์ ‘๊ทผ๊ณผ ํ•จ๊ป˜ ํ—ˆ์šฉํ•˜๋ฉฐ, Kubernetes ์ด๋ฒคํŠธ ๊ธฐ๋ฐ˜ ์ž๋™ ํ™•์žฅ(KEDA)์„ ํ™œ์šฉํ•ฉ๋‹ˆ๋‹ค. ### ์—ด๊ฑฐ @@ -153,7 +153,7 @@ Get-AzLogicAppTriggerHistory -ResourceGroupName "" -Name " -Integra [az-logic-apps-post-exploitation.md](../az-post-exploitation/az-logic-apps-post-exploitation.md) {% endcontent-ref %} -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**Discord ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} diff --git a/src/pentesting-cloud/azure-security/az-services/az-mysql.md b/src/pentesting-cloud/azure-security/az-services/az-mysql.md index 9facff90d..b43172011 100644 --- a/src/pentesting-cloud/azure-security/az-services/az-mysql.md +++ b/src/pentesting-cloud/azure-security/az-services/az-mysql.md @@ -1,38 +1,25 @@ # Az - MySQL Databases -{% hint style="success" %} -Learn & practice AWS Hacking:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -Learn & practice GCP Hacking: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -Support HackTricks - -* Check the [**subscription plans**](https://github.com/sponsors/carlospolop)! -* **Join the** ๐Ÿ’ฌ [**Discord group**](https://discord.gg/hRep4RUj7f) or the [**telegram group**](https://t.me/peass) or **follow** us on **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**.** -* **Share hacking tricks by submitting PRs to the** [**HackTricks**](https://github.com/carlospolop/hacktricks) and [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github repos. - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} ## Azure MySQL -Azure Database for MySQL์€ MySQL Community Edition์„ ๊ธฐ๋ฐ˜์œผ๋กœ ํ•œ ์™„์ „ ๊ด€๋ฆฌํ˜• ๊ด€๊ณ„ํ˜• ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ์„œ๋น„์Šค๋กœ, ๋‹ค์–‘ํ•œ ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜ ์š”๊ตฌ์— ๋Œ€ํ•œ ํ™•์žฅ์„ฑ, ๋ณด์•ˆ ๋ฐ ์œ ์—ฐ์„ฑ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. ๋‘ ๊ฐ€์ง€ ๋ฐฐํฌ ๋ชจ๋ธ์ด ์žˆ์Šต๋‹ˆ๋‹ค: +Azure Database for MySQL๋Š” MySQL Community Edition์„ ๊ธฐ๋ฐ˜์œผ๋กœ ํ•œ ์™„์ „ ๊ด€๋ฆฌํ˜• ๊ด€๊ณ„ํ˜• ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ์„œ๋น„์Šค๋กœ, ๋‹ค์–‘ํ•œ ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜ ์š”๊ตฌ์— ๋Œ€ํ•œ ํ™•์žฅ์„ฑ, ๋ณด์•ˆ ๋ฐ ์œ ์—ฐ์„ฑ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. ๋‘ ๊ฐ€์ง€ ๋ฐฐํฌ ๋ชจ๋ธ์ด ์žˆ์Šต๋‹ˆ๋‹ค: * **Single Server** (์€ ํ‡ด์—ญ ๊ฒฝ๋กœ์— ์žˆ์Œ): - ๋น„์šฉ ํšจ์œจ์ ์ด๊ณ  ๊ด€๋ฆฌํ•˜๊ธฐ ์‰ฌ์šด MySQL ๋ฐฐํฌ๋ฅผ ์œ„ํ•ด ์ตœ์ ํ™”๋จ. -- ๊ธฐ๋Šฅ์—๋Š” ์ž๋™ ๋ฐฑ์—…, ๊ณ ๊ฐ€์šฉ์„ฑ ๋ฐ ๊ธฐ๋ณธ ๋ชจ๋‹ˆํ„ฐ๋ง์ด ํฌํ•จ๋จ. -- ์˜ˆ์ธก ๊ฐ€๋Šฅํ•œ ์ž‘์—… ๋ถ€ํ•˜๋ฅผ ๊ฐ€์ง„ ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜์— ์ ํ•ฉํ•จ. +- ์ž๋™ ๋ฐฑ์—…, ๊ณ ๊ฐ€์šฉ์„ฑ ๋ฐ ๊ธฐ๋ณธ ๋ชจ๋‹ˆํ„ฐ๋ง ๊ธฐ๋Šฅ ํฌํ•จ. +- ์˜ˆ์ธก ๊ฐ€๋Šฅํ•œ ์ž‘์—… ๋ถ€ํ•˜๋ฅผ ๊ฐ€์ง„ ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜์— ์ ํ•ฉ. * **Flexible Server**: - ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ๊ด€๋ฆฌ ๋ฐ ๊ตฌ์„ฑ์— ๋Œ€ํ•œ ๋” ๋งŽ์€ ์ œ์–ด๋ฅผ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. - ๊ณ ๊ฐ€์šฉ์„ฑ ์ง€์›(๋™์ผ ์˜์—ญ ๋ฐ ์˜์—ญ ์ค‘๋ณต). -- ํƒ„๋ ฅ์  ํ™•์žฅ, ํŒจ์น˜ ๊ด€๋ฆฌ ๋ฐ ์ž‘์—… ๋ถ€ํ•˜ ์ตœ์ ํ™” ๊ธฐ๋Šฅ์„ ํฌํ•จํ•ฉ๋‹ˆ๋‹ค. -- ๋น„์šฉ ์ ˆ๊ฐ์„ ์œ„ํ•œ ์ค‘์ง€/์‹œ์ž‘ ๊ธฐ๋Šฅ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. +- ํƒ„๋ ฅ์  ํ™•์žฅ, ํŒจ์น˜ ๊ด€๋ฆฌ ๋ฐ ์ž‘์—… ๋ถ€ํ•˜ ์ตœ์ ํ™” ๊ธฐ๋Šฅ ํฌํ•จ. +- ๋น„์šฉ ์ ˆ๊ฐ์„ ์œ„ํ•œ ์ค‘์ง€/์‹œ์ž‘ ๊ธฐ๋Šฅ ์ œ๊ณต. -### Key Features -* **Server Management**: **ad-admin** ๊ธฐ๋Šฅ์€ MySQL ์„œ๋ฒ„์— ๋Œ€ํ•œ Azure Active Directory (AAD) ๊ด€๋ฆฌ์ž๋ฅผ ๊ด€๋ฆฌํ•  ์ˆ˜ ์žˆ๊ฒŒ ํ•˜์—ฌ AAD ์ž๊ฒฉ ์ฆ๋ช…์„ ํ†ตํ•œ ๊ด€๋ฆฌ ์•ก์„ธ์Šค๋ฅผ ์ œ์–ดํ•˜๋ฉฐ, **identity** ๊ธฐ๋Šฅ์€ Azure Managed Identities์˜ ํ• ๋‹น ๋ฐ ๊ด€๋ฆฌ๋ฅผ ๊ฐ€๋Šฅํ•˜๊ฒŒ ํ•˜์—ฌ Azure ๋ฆฌ์†Œ์Šค์— ๋Œ€ํ•œ ์•ˆ์ „ํ•œ ์ž๊ฒฉ ์ฆ๋ช… ์—†๋Š” ์ธ์ฆ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. -* **Lifecycle Management**: ์„œ๋ฒ„ ์‹œ์ž‘ ๋˜๋Š” ์ค‘์ง€, ์œ ์—ฐํ•œ ์„œ๋ฒ„ ์ธ์Šคํ„ด์Šค ์‚ญ์ œ, ๊ตฌ์„ฑ ๋ณ€๊ฒฝ์„ ์‹ ์†ํ•˜๊ฒŒ ์ ์šฉํ•˜๊ธฐ ์œ„ํ•œ ์„œ๋ฒ„ ์žฌ์‹œ์ž‘, ์ž๋™ํ™” ์Šคํฌ๋ฆฝํŠธ๋ฅผ ์ง„ํ–‰ํ•˜๊ธฐ ์ „์— ์„œ๋ฒ„๊ฐ€ ํŠน์ • ์กฐ๊ฑด์„ ์ถฉ์กฑํ•˜๋Š”์ง€ ํ™•์ธํ•˜๋Š” ์˜ต์…˜์„ ํฌํ•จํ•ฉ๋‹ˆ๋‹ค. -* **Security and Networking**: ์•ˆ์ „ํ•œ ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ์•ก์„ธ์Šค๋ฅผ ์œ„ํ•œ ์„œ๋ฒ„ ๋ฐฉํ™”๋ฒฝ ๊ทœ์น™์„ ๊ด€๋ฆฌํ•˜๊ณ  ํ•„์š”์— ๋”ฐ๋ผ ๊ฐ€์ƒ ๋„คํŠธ์›Œํฌ ๊ตฌ์„ฑ์„ ๋ถ„๋ฆฌํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. -* **Data Protection and Backup**: ๋ฐ์ดํ„ฐ ๋ณต๊ตฌ๋ฅผ ์œ„ํ•œ ์œ ์—ฐํ•œ ์„œ๋ฒ„ ๋ฐฑ์—… ๊ด€๋ฆฌ ์˜ต์…˜, ๋‹ค๋ฅธ ์ง€์—ญ์—์„œ ์„œ๋ฒ„๋ฅผ ๋ณต๊ตฌํ•˜๊ธฐ ์œ„ํ•œ ์ง€๋ฆฌ์  ๋ณต์› ์ˆ˜ํ–‰, ์™ธ๋ถ€ ์‚ฌ์šฉ์„ ์œ„ํ•œ ์„œ๋ฒ„ ๋ฐฑ์—… ๋‚ด๋ณด๋‚ด๊ธฐ(๋ฏธ๋ฆฌ ๋ณด๊ธฐ), ํŠน์ • ์‹œ์ ์œผ๋กœ ๋ฐฑ์—…์—์„œ ์„œ๋ฒ„ ๋ณต์› ๊ธฐ๋Šฅ์„ ํฌํ•จํ•ฉ๋‹ˆ๋‹ค. +### ์ฃผ์š” ๊ธฐ๋Šฅ +* **์„œ๋ฒ„ ๊ด€๋ฆฌ**: **ad-admin** ๊ธฐ๋Šฅ์€ MySQL ์„œ๋ฒ„์— ๋Œ€ํ•œ Azure Active Directory (AAD) ๊ด€๋ฆฌ์ž๋ฅผ ๊ด€๋ฆฌํ•  ์ˆ˜ ์žˆ๊ฒŒ ํ•˜์—ฌ AAD ์ž๊ฒฉ ์ฆ๋ช…์„ ํ†ตํ•œ ๊ด€๋ฆฌ ์•ก์„ธ์Šค๋ฅผ ์ œ์–ดํ•˜๋ฉฐ, **identity** ๊ธฐ๋Šฅ์€ Azure Managed Identities์˜ ํ• ๋‹น ๋ฐ ๊ด€๋ฆฌ๋ฅผ ๊ฐ€๋Šฅํ•˜๊ฒŒ ํ•˜์—ฌ Azure ๋ฆฌ์†Œ์Šค์— ๋Œ€ํ•œ ์•ˆ์ „ํ•œ ์ž๊ฒฉ ์ฆ๋ช… ์—†๋Š” ์ธ์ฆ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. +* **์ˆ˜๋ช… ์ฃผ๊ธฐ ๊ด€๋ฆฌ**: ์„œ๋ฒ„ ์‹œ์ž‘ ๋˜๋Š” ์ค‘์ง€, ์œ ์—ฐํ•œ ์„œ๋ฒ„ ์ธ์Šคํ„ด์Šค ์‚ญ์ œ, ๊ตฌ์„ฑ ๋ณ€๊ฒฝ์„ ์‹ ์†ํ•˜๊ฒŒ ์ ์šฉํ•˜๊ธฐ ์œ„ํ•œ ์„œ๋ฒ„ ์žฌ์‹œ์ž‘, ์ž๋™ํ™” ์Šคํฌ๋ฆฝํŠธ๋ฅผ ์ง„ํ–‰ํ•˜๊ธฐ ์ „์— ์„œ๋ฒ„๊ฐ€ ํŠน์ • ์กฐ๊ฑด์„ ์ถฉ์กฑํ•˜๋Š”์ง€ ํ™•์ธํ•˜๋Š” ์˜ต์…˜ ํฌํ•จ. +* **๋ณด์•ˆ ๋ฐ ๋„คํŠธ์›Œํ‚น**: ์•ˆ์ „ํ•œ ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ์•ก์„ธ์Šค๋ฅผ ์œ„ํ•œ ์„œ๋ฒ„ ๋ฐฉํ™”๋ฒฝ ๊ทœ์น™์„ ๊ด€๋ฆฌํ•˜๊ณ  ํ•„์š”์— ๋”ฐ๋ผ ๊ฐ€์ƒ ๋„คํŠธ์›Œํฌ ๊ตฌ์„ฑ์„ ๋ถ„๋ฆฌํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. +* **๋ฐ์ดํ„ฐ ๋ณดํ˜ธ ๋ฐ ๋ฐฑ์—…**: ๋ฐ์ดํ„ฐ ๋ณต๊ตฌ๋ฅผ ์œ„ํ•œ ์œ ์—ฐํ•œ ์„œ๋ฒ„ ๋ฐฑ์—… ๊ด€๋ฆฌ ์˜ต์…˜, ๋‹ค๋ฅธ ์ง€์—ญ์—์„œ ์„œ๋ฒ„๋ฅผ ๋ณต๊ตฌํ•˜๊ธฐ ์œ„ํ•œ ์ง€๋ฆฌ์  ๋ณต์› ์ˆ˜ํ–‰, ์™ธ๋ถ€ ์‚ฌ์šฉ์„ ์œ„ํ•œ ์„œ๋ฒ„ ๋ฐฑ์—… ๋‚ด๋ณด๋‚ด๊ธฐ(๋ฏธ๋ฆฌ ๋ณด๊ธฐ), ํŠน์ • ์‹œ์ ์œผ๋กœ ๋ฐฑ์—…์—์„œ ์„œ๋ฒ„ ๋ณต์› ๊ธฐ๋Šฅ ํฌํ•จ. ### Enumeration @@ -178,17 +165,4 @@ az mysql flexible-server deploy run \ -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ธฐ ๋ฐ ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**Discord ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} diff --git a/src/pentesting-cloud/azure-security/az-services/az-postgresql.md b/src/pentesting-cloud/azure-security/az-services/az-postgresql.md index 1a7bc396c..4a29d8334 100644 --- a/src/pentesting-cloud/azure-security/az-services/az-postgresql.md +++ b/src/pentesting-cloud/azure-security/az-services/az-postgresql.md @@ -1,32 +1,19 @@ # Az - PostgreSQL Databases -{% hint style="success" %} -AWS ํ•ดํ‚น์„ ๋ฐฐ์šฐ๊ณ  ์—ฐ์Šตํ•˜์„ธ์š”:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น์„ ๋ฐฐ์šฐ๊ณ  ์—ฐ์Šตํ•˜์„ธ์š”: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**Discord ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) ๊นƒํ—ˆ๋ธŒ ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}} ## Azure PostgreSQL -**Azure Database for PostgreSQL**๋Š” **PostgreSQL** ์ปค๋ฎค๋‹ˆํ‹ฐ ์—๋””์…˜์„ ๊ธฐ๋ฐ˜์œผ๋กœ ํ•œ ์™„์ „ ๊ด€๋ฆฌํ˜• **๊ด€๊ณ„ํ˜• ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ์„œ๋น„์Šค**์ž…๋‹ˆ๋‹ค. ๋‹ค์–‘ํ•œ ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜ ์š”๊ตฌ์— ๋Œ€ํ•œ ํ™•์žฅ์„ฑ, ๋ณด์•ˆ ๋ฐ ์œ ์—ฐ์„ฑ์„ ์ œ๊ณตํ•˜๋„๋ก ์„ค๊ณ„๋˜์—ˆ์Šต๋‹ˆ๋‹ค. Azure MySQL๊ณผ ์œ ์‚ฌํ•˜๊ฒŒ PostgreSQL์€ ๋‘ ๊ฐ€์ง€ ๋ฐฐํฌ ๋ชจ๋ธ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค: +**Azure Database for PostgreSQL**๋Š” **PostgreSQL** ์ปค๋ฎค๋‹ˆํ‹ฐ ์—๋””์…˜์„ ๊ธฐ๋ฐ˜์œผ๋กœ ํ•œ ์™„์ „ ๊ด€๋ฆฌํ˜• **๊ด€๊ณ„ํ˜• ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ์„œ๋น„์Šค**์ž…๋‹ˆ๋‹ค. ๋‹ค์–‘ํ•œ ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜ ์š”๊ตฌ์— ๋Œ€ํ•œ ํ™•์žฅ์„ฑ, ๋ณด์•ˆ ๋ฐ ์œ ์—ฐ์„ฑ์„ ์ œ๊ณตํ•˜๋„๋ก ์„ค๊ณ„๋˜์—ˆ์Šต๋‹ˆ๋‹ค. Azure MySQL๊ณผ ์œ ์‚ฌํ•˜๊ฒŒ, PostgreSQL์€ ๋‘ ๊ฐ€์ง€ ๋ฐฐํฌ ๋ชจ๋ธ์„ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค: -* **๋‹จ์ผ ์„œ๋ฒ„** (ํ‡ด์—ญ ๊ฒฝ๋กœ์— ์žˆ์Œ): +* **Single Server** (ํ‡ด์—ญ ๊ฒฝ๋กœ์— ์žˆ์Œ): - ๊ฐ„๋‹จํ•˜๊ณ  ๋น„์šฉ ํšจ์œจ์ ์ธ PostgreSQL ๋ฐฐํฌ๋ฅผ ์œ„ํ•ด ์ตœ์ ํ™”๋จ. - ์ž๋™ ๋ฐฑ์—…, ๊ธฐ๋ณธ ๋ชจ๋‹ˆํ„ฐ๋ง ๋ฐ ๊ณ ๊ฐ€์šฉ์„ฑ ๊ธฐ๋Šฅ์„ ๊ฐ–์ถค. - ์˜ˆ์ธก ๊ฐ€๋Šฅํ•œ ์ž‘์—… ๋ถ€ํ•˜๋ฅผ ๊ฐ€์ง„ ์• ํ”Œ๋ฆฌ์ผ€์ด์…˜์— ์ ํ•ฉ. -* **์œ ์—ฐํ•œ ์„œ๋ฒ„**: -- ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ๊ด€๋ฆฌ ๋ฐ ๊ตฌ์„ฑ์— ๋Œ€ํ•œ ๋” ํฐ ์ œ์–ด๋ฅผ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. -- ๋™์ผํ•œ ์˜์—ญ ๋ฐ ์˜์—ญ ๊ฐ„์˜ ๊ณ ๊ฐ€์šฉ์„ฑ์„ ์ง€์›ํ•ฉ๋‹ˆ๋‹ค. +* **Flexible Server**: +- ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค ๊ด€๋ฆฌ ๋ฐ ๊ตฌ์„ฑ์— ๋Œ€ํ•œ ๋” ํฐ ์ œ์–ด๋ฅผ ์ œ๊ณต. +- ๋™์ผํ•œ ์˜์—ญ ๋ฐ ์˜์—ญ ๊ฐ„์˜ ๊ณ ๊ฐ€์šฉ์„ฑ์„ ์ง€์›. - ํƒ„๋ ฅ์  ํ™•์žฅ, ์ž๋™ ์œ ์ง€ ๊ด€๋ฆฌ ๋ฐ ๋น„์šฉ ์ ˆ๊ฐ ๊ธฐ๋Šฅ์„ ๊ฐ–์ถค. -- ๋น„์šฉ ์ตœ์ ํ™”๋ฅผ ์œ„ํ•ด ์„œ๋ฒ„๋ฅผ ์‹œ์ž‘ํ•˜๊ณ  ์ค‘์ง€ํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. +- ๋น„์šฉ ์ตœ์ ํ™”๋ฅผ ์œ„ํ•ด ์„œ๋ฒ„๋ฅผ ์‹œ์ž‘ํ•˜๊ณ  ์ค‘์ง€ํ•  ์ˆ˜ ์žˆ์Œ. ### ์ฃผ์š” ๊ธฐ๋Šฅ @@ -154,20 +141,6 @@ psql -h testpostgresserver1994.postgres.database.azure.com -p 5432 -U adminuser ## ToDo -* ad-admin์œผ๋กœ ์ ‘๊ทผํ•  ๋ฐฉ๋ฒ•์„ ์ฐพ์•„์„œ ์ด๊ฒƒ์ด privesc ๋ฐฉ๋ฒ•์ธ์ง€ ํ™•์ธํ•˜์„ธ์š”. +* ad-admin์œผ๋กœ ์ ‘๊ทผํ•  ๋ฐฉ๋ฒ•์„ ์ฐพ์•„์„œ privesc ๋ฐฉ๋ฒ•์ธ์ง€ ํ™•์ธํ•˜์‹ญ์‹œ์˜ค. - -{% hint style="success" %} -AWS ํ•ดํ‚น ๋ฐฐ์šฐ๊ณ  ์—ฐ์Šตํ•˜๊ธฐ:[**HackTricks Training AWS Red Team Expert (ARTE)**](https://training.hacktricks.xyz/courses/arte)\ -GCP ํ•ดํ‚น ๋ฐฐ์šฐ๊ณ  ์—ฐ์Šตํ•˜๊ธฐ: [**HackTricks Training GCP Red Team Expert (GRTE)**](https://training.hacktricks.xyz/courses/grte) - -
- -HackTricks ์ง€์›ํ•˜๊ธฐ - -* [**๊ตฌ๋… ๊ณ„ํš**](https://github.com/sponsors/carlospolop) ํ™•์ธํ•˜๊ธฐ! -* **๐Ÿ’ฌ [**Discord ๊ทธ๋ฃน**](https://discord.gg/hRep4RUj7f) ๋˜๋Š” [**ํ…”๋ ˆ๊ทธ๋žจ ๊ทธ๋ฃน**](https://t.me/peass)์— ์ฐธ์—ฌํ•˜๊ฑฐ๋‚˜ **Twitter** ๐Ÿฆ [**@hacktricks\_live**](https://twitter.com/hacktricks_live)**๋ฅผ ํŒ”๋กœ์šฐํ•˜์„ธ์š”.** -* **[**HackTricks**](https://github.com/carlospolop/hacktricks) ๋ฐ [**HackTricks Cloud**](https://github.com/carlospolop/hacktricks-cloud) github ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์— PR์„ ์ œ์ถœํ•˜์—ฌ ํ•ดํ‚น ํŒ์„ ๊ณต์œ ํ•˜์„ธ์š”.** - -
-{% endhint %} +{{#include ../../../banners/hacktricks-training.md}}