mirror of
https://github.com/HackTricks-wiki/hacktricks-cloud.git
synced 2026-01-10 12:13:17 -08:00
Translated ['src/pentesting-cloud/azure-security/az-unauthenticated-enum
This commit is contained in:
@@ -0,0 +1,37 @@
|
||||
# Az - VMs Unauth
|
||||
|
||||
{{#include ../../../banners/hacktricks-training.md}}
|
||||
|
||||
## Mashine za Kijijini
|
||||
|
||||
Kwa maelezo zaidi kuhusu Azure Virtual Machines angalia:
|
||||
|
||||
{{#ref}}
|
||||
../az-services/vms/
|
||||
{{#endref}}
|
||||
|
||||
### Huduma iliyo wazi yenye udhaifu
|
||||
|
||||
Huduma ya mtandao ambayo ina udhaifu wa RCE fulani.
|
||||
|
||||
### Picha za Jumba la Umma
|
||||
|
||||
Picha ya umma inaweza kuwa na siri ndani yake:
|
||||
```bash
|
||||
# List all community galleries
|
||||
az sig list-community --output table
|
||||
|
||||
# Search by publisherUri
|
||||
az sig list-community --output json --query "[?communityMetadata.publisherUri=='https://3nets.io']"
|
||||
```
|
||||
### Public Extensions
|
||||
|
||||
Hii ingekuwa ya ajabu zaidi lakini si haiwezekani. Kampuni kubwa inaweza kuweka nyongeza yenye data nyeti ndani yake:
|
||||
```bash
|
||||
# It takes some mins to run
|
||||
az vm extension image list --output table
|
||||
|
||||
# Get extensions by publisher
|
||||
az vm extension image list --publisher "Site24x7" --output table
|
||||
```
|
||||
{{#include ../../../banners/hacktricks-training.md}}
|
||||
Reference in New Issue
Block a user