From c0e4301ef3ca76c8dc0388001f6f2eb8b83b7347 Mon Sep 17 00:00:00 2001 From: sethsec-bf <46326948+sethsec-bf@users.noreply.github.com> Date: Tue, 16 Apr 2024 14:10:51 -0400 Subject: [PATCH] Add GCP to readme, fix typo --- README.md | 18 +++++++++++++++++- gcp/commands/bigquery.go | 4 ++-- 2 files changed, 19 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index c644cf0..5c8baa6 100644 --- a/README.md +++ b/README.md @@ -50,7 +50,7 @@ For the full documentation please refer to our [wiki](https://github.com/BishopF | - | - | | AWS | 34 | | Azure | 4 | -| GCP | Support Planned | +| GCP | 8 | | Kubernetes | Support Planned | @@ -111,6 +111,7 @@ Additional policy notes (as of 09/2022): | AWS | [access-keys](https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#access-keys) | Lists active access keys for all users. Useful for cross referencing a key you found with which in-scope account it belongs to. | | AWS | [api-gw](https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#api-gw) | Lists API gateway endpoints and gives you custom curl commands including API tokens if they are stored in metadata. | | AWS | [buckets](https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#filesystems) | Lists the buckets in the account and gives you handy commands for inspecting them further. | +| AWS | [cape](https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#cape) | Enumerates cross-account privilege escalation paths. Requires `pmapper` to be run first | | AWS | [cloudformation](https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#cloudformation) | Lists the cloudformation stacks in the account. Generates loot file with stack details, stack parameters, and stack output - look for secrets. | | AWS | [codebuild](https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#codebuild) | Enumerate CodeBuild projects | | AWS | [databases](https://github.com/BishopFox/cloudfox/wiki/AWS-Commands#databases) | Enumerate RDS databases. Get a loot file with connection strings. | @@ -152,6 +153,21 @@ Additional policy notes (as of 09/2022): | Azure | [storage](https://github.com/BishopFox/cloudfox/wiki/Azure-Commands#storage) | The storage command is still under development. Currently it only displays limited data about the storage accounts | | Azure | [vms](https://github.com/BishopFox/cloudfox/wiki/Azure-Commands#vms) | Enumerates useful information for Compute instances in all available resource groups and subscriptions | + +# GCP Commands +| Provider | Command Name | Description +| - | - | - | +| GCP | [whoami](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#whoami) | Display the email address of the GCP authenticated user | +| GCP | [all-checks](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#all-checks) | Runs all available GCP commands | +| GCP | [artifact-registry](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#artifact-registry) | Display GCP artifact registry information | +| GCP | [bigquery](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#bigquery) | Display Bigquery datasets and tables information | +| GCP | [buckets](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#buckets) | Display GCP buckets information | +| GCP | [iam](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#iam) | Display GCP IAM information | +| GCP | [instances](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#instances) | Display GCP Compute Engine instances information | +| GCP | [secrets](https://github.com/BishopFox/cloudfox/wiki/GCP-Commands#secrets) | Display GCP secrets information | + + + # Authors * [Carlos Vendramini](https://github.com/carlosvendramini-bf) * [Seth Art (@sethsec](https://twitter.com/sethsec)) diff --git a/gcp/commands/bigquery.go b/gcp/commands/bigquery.go index c324e8b..01b67fd 100644 --- a/gcp/commands/bigquery.go +++ b/gcp/commands/bigquery.go @@ -14,10 +14,10 @@ import ( var GCPBigQueryCommand = &cobra.Command{ Use: "bigquery", Aliases: []string{}, - Short: "Display Bigauery datasets and tables information", + Short: "Display Bigquery datasets and tables information", Args: cobra.MinimumNArgs(0), Long: ` -Display available Bigauery datasets and tables resource information: +Display available Bigquery datasets and tables resource information: cloudfox gcp bigquery`, Run: runGCPBigQueryCommand, }