From b6a2561cb9bf1c4fb7dae9282471b35448751978 Mon Sep 17 00:00:00 2001 From: Translator Date: Sat, 4 Jan 2025 17:56:30 +0000 Subject: [PATCH] Translated ['src/pentesting-cloud/aws-security/aws-privilege-escalation/ --- hacktricks-preprocessor.py | 38 ++++++++++++++++++- .../iam-passrole-codestar-createproject.md | 8 ++-- 2 files changed, 41 insertions(+), 5 deletions(-) diff --git a/hacktricks-preprocessor.py b/hacktricks-preprocessor.py index 7a4dd84a1..0077da80f 100644 --- a/hacktricks-preprocessor.py +++ b/hacktricks-preprocessor.py @@ -1,4 +1,5 @@ import json +import os import sys import re import logging @@ -26,7 +27,7 @@ def findtitle(search ,obj, key, path=(),): def ref(matchobj): - logger.debug(f'Match: {matchobj.groups(0)[0].strip()}') + logger.debug(f'Ref match: {matchobj.groups(0)[0].strip()}') href = matchobj.groups(0)[0].strip() title = href if href.startswith("http://") or href.startswith("https://"): @@ -69,8 +70,39 @@ def ref(matchobj): return result +def files(matchobj): + logger.debug(f'Files match: {matchobj.groups(0)[0].strip()}') + href = matchobj.groups(0)[0].strip() + title = "" + + try: + for root, dirs, files in os.walk(os.getcwd()+'/src/files'): + logger.debug(root) + logger.debug(files) + if href in files: + title = href + logger.debug(f'File search result: {os.path.join(root, href)}') + + except Exception as e: + logger.debug(e) + logger.debug(f'Error searching file: {href}') + print(f'Error searching file: {href}') + sys.exit(1) + + if title=="": + logger.debug(f'Error searching file: {href}') + print(f'Error searching file: {href}') + sys.exit(1) + + template = f"""{title}""" + + result = template + + return result + + def add_read_time(content): - regex = r'(# .*(?=\n))' + regex = r'(<\/style>\n# .*(?=\n))' new_content = re.sub(regex, lambda x: x.group(0) + "\n\nReading time: {{ #reading_time }}", content) return new_content @@ -104,6 +136,8 @@ if __name__ == '__main__': current_chapter = chapter regex = r'{{[\s]*#ref[\s]*}}(?:\n)?([^\\\n]*)(?:\n)?{{[\s]*#endref[\s]*}}' new_content = re.sub(regex, ref, chapter['content']) + regex = r'{{[\s]*#file[\s]*}}(?:\n)?([^\\\n]*)(?:\n)?{{[\s]*#endfile[\s]*}}' + new_content = re.sub(regex, files, chapter['content']) new_content = add_read_time(new_content) chapter['content'] = new_content diff --git a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/iam-passrole-codestar-createproject.md b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/iam-passrole-codestar-createproject.md index 923df43f1..43f95de37 100644 --- a/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/iam-passrole-codestar-createproject.md +++ b/src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codestar-privesc/iam-passrole-codestar-createproject.md @@ -28,13 +28,15 @@ Para explorar isso, você precisa criar um **bucket S3 que seja acessível** a p } } ``` -Também **envie** este arquivo `empty zip` para o **bucket**: +Também **faça o upload** deste arquivo `empty zip` para o **bucket**: -{% file src="../../../../images/empty.zip" %} +{{#file}} +empty.zip +{{#endfile}} Lembre-se de que o **bucket com ambos os arquivos deve ser acessível pela conta da vítima**. -Com ambas as coisas enviadas, você pode agora prosseguir para a **exploitação** criando um projeto **codestar**: +Com ambas as coisas carregadas, você pode agora prosseguir para a **exploitação** criando um projeto **codestar**: ```bash PROJECT_NAME="supercodestar"