sathishphcl

Purpose

*Most pentesting and gcp privilege escalation stuff out there for GCP assumes what I'm finding to be an absurd level of access handed to you.(i.e Human 2fa protected accounts, organization-wide read only IAM perms, etc that is not suitable for use in black box testing of mature environments.
There's a lot of data you need to use the gcp api only available behind mandatory 2fa protected human accounts that service accounts and low tier project accounts simply do not have access to enumerating if you find yourself having popped an application or shelled a instance somehow and have console-only access.

Intent of this is to break down various categories of escalation that will be available to service accounts, as well as point out various showstoppers.

• 0.1. References
• 0.2. Other cheatsheets
• 0.3. Manage multiple gcloud config configurations
• [0.3.1. Switch gcloud context with gcloud config](#031

sathishphcl

using namespace Microsoft.Azure.Commands.ResourceManager.Common.ArgumentCompleters

function Invoke-AzVMScript {
    [CmdletBinding()]
    param(
        [Parameter(Mandatory)]
        [ResourceGroupCompleter()]
        [string]$ResourceGroupName,

        [Parameter(Mandatory)]

sathishphcl

#Security log
#============
####
#4624 - Logon & Logoff events successful
#4625 - Logon unsucceful

####
# Get usernames
Get-WinEvent -path .\Security.evtx | Where {$_.id -eq "4624"} | Foreach {([xml]$_.ToXml()).GetElementsByTagName("Data").ItemOf(5)}| Select -ExpandProperty "#text" -Unique 
# Get domains

sathishphcl

# Copyright 2019, Alexander Hass
# https://www.hass.de/content/setup-microsoft-windows-or-iis-ssl-perfect-forward-secrecy-and-tls-12
#
# After running this script the computer only supports:
# - TLS 1.2
#
# Version 3.0.1, see CHANGELOG.txt for changes.
 
Write-Host 'Configuring IIS with SSL/TLS Deployment Best Practices...'
Write-Host '--------------------------------------------------------------------------------'

sathishphcl

---
- hosts: localhost
  become: True
  vars:
    archive_path: /home/vagrant/containers
    containers:
      - name: quay.io/dcode/strelka_manager
        tag: latest
        id: 8b8321cf9c81
      - name: quay.io/dcode/strelka_frontend

sathishphcl

# CopyManagedDisk.ps1
# Morgan Simonsen
# morgansimonsen.com
#
# Copies an Azure managed disk from one Azure region to another via a storage account

[CmdletBinding()]
Param(
  [Parameter(Mandatory=$True,Position=1,
  HelpMessage="Source resource group where the managed disk(s) to copy is.")]

sathishphcl

 # run as administrator
 # reboot afterwards
 Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server'-name "fDenyTSConnections" -Value 0
 Enable-NetFirewallRule -DisplayGroup "Remote Desktop"
 Set-ItemProperty -Path 'HKLM:\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' -name "UserAuthentication" -Value 1

sathishphcl

Docker Deep Dive

Course link: https://www.pluralsight.com/courses/docker-deep-dive-update

• https://labs.play-with-docker.com/

Architecture & Theory

Architecture Big Picture

sathishphcl

Kubernetes

Overview

Kubernetes is an open source system developed by Google for managing containerized applications across multiple hosts, providing basic mechanisms for deployment, maintenance, and scaling of applications. Kubernetes helps you make sure those containerized applications run where and when you want, and helps them find the resources and tools they need to work.

Kubernetes was released in February 2015 with the following goals and considerations:

• Empower application developers with a powerful tool for Docker container orchestration without having to interact with the underlying infrastructure;
• Provide standard deployment interface and primitives for a consistent app deployment experience and APIs across clouds;
• Build on a Modular API core that allows vendors to integrate systems around the core Kubernetes technology.

sathishphcl

# Rename Windows PC via PowerShell and WMI

# http://social.technet.microsoft.com/wiki/contents/articles/7824.set-computer-name-using-powershell.aspx
# https://technet.microsoft.com/en-us/library/hh849792(v=wps.620).aspx

$ComputerName = Get-WmiObject Win32_ComputerSystem
$ComputerName.Rename($name)
Restart-Computer