Skip to content

gcp-clientauthconfig-privesc.md

Latest commit

 

History

History
33 lines (22 loc) · 956 Bytes

gcp-clientauthconfig-privesc.md

File metadata and controls

33 lines (22 loc) · 956 Bytes

GCP - ClientAuthConfig Privesc

{{#include ../../../banners/hacktricks-training.md}}

Create OAuth Brand and Client

According to the docs, these are the required permissions:

  • clientauthconfig.brands.list
  • clientauthconfig.brands.create
  • clientauthconfig.brands.get
  • clientauthconfig.clients.create
  • clientauthconfig.clients.listWithSecrets
  • clientauthconfig.clients.getWithSecret
  • clientauthconfig.clients.delete
  • clientauthconfig.clients.update
Create OAuth brand and client 
# Create a brand
gcloud iap oauth-brands list
gcloud iap oauth-brands create --application_title=APPLICATION_TITLE --support_email=SUPPORT_EMAIL
# Create a client of the brand
gcloud iap oauth-clients create projects/PROJECT_NUMBER/brands/BRAND-ID --display_name=NAME

{{#include ../../../banners/hacktricks-training.md}}