hacktricks-cloud/src/pentesting-cloud/gcp-security/gcp-persistence/gcp-storage-persistence.md

GCP - Storage Persistence

{{#include ../../../banners/hacktricks-training.md}}

Storage

Kwa maelezo zaidi kuhusu Cloud Storage angalia:

{{#ref}} ../gcp-services/gcp-storage-enum.md {{#endref}}

storage.hmacKeys.create

Unaweza kuunda HMAC ili kudumisha uthabiti juu ya ndoo. Kwa maelezo zaidi kuhusu mbinu hii angalia hapa.

# Create key
gsutil hmac create <sa-email>

# Configure gsutil to use it
gsutil config -a

# Use it
gsutil ls gs://[BUCKET_NAME]

Another exploit script for this method can be found here.

Toa Ufikiaji wa Umma

Kufanya ndoo iweze kufikiwa na umma ni njia nyingine ya kudumisha ufikiaji wa ndoo hiyo. Angalia jinsi ya kufanya hivyo katika:

{{#ref}} ../gcp-post-exploitation/gcp-storage-post-exploitation.md {{#endref}}

{{#include ../../../banners/hacktricks-training.md}}