translate

.github/pull_request_template.md

@@ -15,4 +15,3 @@ In any case, thanks for contributing to HackTricks!
 
 
 
-

.gitignore

@@ -4,7 +4,6 @@
 
 
 
-
 # General
 .DS_Store
 .AppleDouble

hacktricks-preprocessor.py

@@ -43,7 +43,7 @@ def ref(matchobj):
             if href.endswith("/"):
                 href = href+"README.md" # Fix if ref points to a folder
             chapter, _path = findtitle(href, book, "source_path")
-            logger.debug(f'Recursive title search result: {chapter['name']}')
+            logger.debug(f'Recursive title search result: {chapter["name"]}')
             title = chapter['name']
         except Exception as e:
             try:

scripts/translator.py

@@ -12,7 +12,6 @@ from tqdm import tqdm #pip3 install tqdm
 import traceback
 
 
-
 MASTER_BRANCH = "master"
 VERBOSE = True
 MAX_TOKENS = 10000 #gpt-4-1106-preview
@@ -214,23 +213,25 @@ def split_text(text, model):
     return chunks
 
 
-def copy_gitbook_dir(source_path, dest_path):
-    folder_name = ".gitbook/"
-    source_folder = os.path.join(source_path, folder_name)
-    destination_folder = os.path.join(dest_path, folder_name)
-    if not os.path.exists(source_folder):
-        print(f"Error: {source_folder} does not exist.")
-    else:
-        # Copy the .gitbook folder
-        shutil.copytree(source_folder, destination_folder)
-        print(f"Copied .gitbook folder from {source_folder} to {destination_folder}")
+def copy_dirs(source_path, dest_path):
+    folder_names = ["theme/", "src/images/"]
+    for folder_name in folder_names:
+        source_folder = os.path.join(source_path, folder_name)
+        destination_folder = os.path.join(dest_path, folder_name)
+        if not os.path.exists(source_folder):
+            print(f"Error: {source_folder} does not exist.")
+        else:
+            # Copy the theme folder
+            shutil.copytree(source_folder, destination_folder)
+            print(f"Copied .gitbook folder from {source_folder} to {destination_folder}")
 
-def copy_summary(source_path, dest_path):
-    file_name = "src/SUMMARY.md"
-    source_filepath = os.path.join(source_path, file_name)
-    dest_filepath = os.path.join(dest_path, file_name)
-    shutil.copy2(source_filepath, dest_filepath)
-    print("[+] Copied SUMMARY.md")
+def copy_files(source_path, dest_path):
+    file_names = ["src/SUMMARY.md", "hacktricks-preprocessonr.py", "book.toml", ".gitignore"]
+    for file_name in file_names:
+        source_filepath = os.path.join(source_path, file_name)
+        dest_filepath = os.path.join(dest_path, file_name)
+        shutil.copy2(source_filepath, dest_filepath)
+        print(f"[+] Copied {file_name}")
 
 def translate_file(language, file_path, file_dest_path, model, client):
     global VERBOSE
@@ -384,10 +385,10 @@ if __name__ == "__main__":
         exit(1)
 
     # Copy summary
-    copy_summary(source_folder, dest_folder)
+    copy_files(source_folder, dest_folder)
 
     # Copy .gitbook folder
-    copy_gitbook_dir(source_folder, dest_folder) 
+    copy_dirs(source_folder, dest_folder) 
 
     # Create the branch and copy the translated files
     cp_translation_to_repo_dir_and_check_gh_branch(branch, dest_folder, translate_files)

src/README.md

@@ -39,4 +39,3 @@ _Hacktricks logos & motion designed by_ [_@ppiernacho_](https://www.instagram.co
 
 
 
-

src/SUMMARY.md

@@ -506,4 +506,3 @@
 
 
 
-

src/banners/hacktricks-training.md

@@ -16,4 +16,3 @@
 
 
 
-

src/pentesting-ci-cd/ansible-tower-awx-automation-controller-security.md

@@ -141,4 +141,3 @@ From a **white box security** review, you would need the **System Auditor role**
 
 
 
-

src/pentesting-cloud/azure-security/az-lateral-movement-cloud-on-prem/azure-ad-connect-hybrid-identity/seamless-sso.md

@@ -119,4 +119,3 @@ python rbdel.py -u <workgroup>\\<user> -p <pass> <ip> azureadssosvc$
 
 
 
-

src/pentesting-cloud/azure-security/az-persistence/README.md

@@ -70,4 +70,3 @@ Open-AADIntOffice365Portal -ImmutableID qIMPTm2Q3kimHgg4KQyveA== -Issuer "http:/
 
 
 
-

src/pentesting-cloud/azure-security/az-persistence/az-queue-persistance.md

@@ -33,4 +33,3 @@ az storage queue policy set --name <queue-name> --permissions rwd --expiry 2024-
 
 
 
-

src/pentesting-cloud/azure-security/az-persistence/az-storage-persistence.md

@@ -43,4 +43,3 @@ az storage blob service-properties delete-policy update \
 
 
 
-

src/pentesting-cloud/azure-security/az-persistence/az-vms-persistence.md

@@ -27,4 +27,3 @@ An attacker could get access to the instances and backdoor them:
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/README.md

@@ -4,4 +4,3 @@
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-blob-storage-post-exploitation.md

@@ -47,4 +47,3 @@ This would allow to delete objects inside the storage account which might **inte
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-file-share-post-exploitation.md

@@ -50,4 +50,3 @@ This would allow to delete file inside the shared filesystem which might **inter
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-function-apps-post-exploitation.md

@@ -19,4 +19,3 @@ For more information about function apps check:
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-key-vault-post-exploitation.md

@@ -113,4 +113,3 @@ az keyvault secret restore --vault-name <vault-name> --file <backup-file-path>
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-queue-post-exploitation.md

@@ -91,4 +91,3 @@ az storage queue policy set --name <queue-name> --permissions rwd --expiry 2024-
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-servicebus-post-exploitation.md

@@ -101,4 +101,3 @@ Take a look here:
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-sql-post-exploitation.md

@@ -104,4 +104,3 @@ az sql db import --admin-user <admin-user> \
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-table-storage-post-exploitation.md

@@ -66,4 +66,3 @@ This would allow to delete file inside the shared filesystem which might **inter
 
 
 
-

src/pentesting-cloud/azure-security/az-post-exploitation/az-vms-and-network-post-exploitation.md

@@ -183,4 +183,3 @@ az vm application set \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/README.md

@@ -4,4 +4,3 @@
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-app-services-privesc.md

@@ -41,4 +41,3 @@ ssh root@127.0.0.1 -p 39895
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-authorization-privesc.md

@@ -84,4 +84,3 @@ az rest --method PUT \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/README.md

@@ -359,4 +359,3 @@ az rest --method GET \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/az-conditional-access-policies-mfa-bypass.md

@@ -183,4 +183,3 @@ $data = Get-SharePointFilesFromGraph -authentication $token $data[0].downloadUrl
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-entraid-privesc/dynamic-groups.md

@@ -52,4 +52,3 @@ az rest --method GET \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-functions-app-privesc.md

@@ -459,4 +459,3 @@ az functionapp deployment source config \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-key-vault-privesc.md

@@ -36,4 +36,3 @@ az keyvault set-policy \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-queue-privesc.md

@@ -75,4 +75,3 @@ az storage queue policy set --name <queue-name> --permissions rwd --expiry 2024-
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-servicebus-privesc.md

@@ -156,4 +156,3 @@ az servicebus namespace authorization-rule update \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-sql-privesc.md

@@ -113,4 +113,3 @@ az sql server azure-ad-only-auth disable \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-storage-privesc.md

@@ -154,4 +154,3 @@ az storage share-rm restore \
 
 
 
-

src/pentesting-cloud/azure-security/az-privilege-escalation/az-virtual-machines-and-network-privesc.md

@@ -384,4 +384,3 @@ According to the [**docs**](https://learn.microsoft.com/en-us/azure/role-based-a
 
 
 
-

src/pentesting-cloud/azure-security/az-services/README.md

@@ -75,4 +75,3 @@ def main(req: func.HttpRequest) -> func.HttpResponse:
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-acr.md

@@ -54,4 +54,3 @@ docker pull <corp-name>.azurecr.io/<image>:<tag>
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-app-service.md

@@ -89,8 +89,6 @@ az webapp config storage-account list --name <name> --resource-gl_group
 
 
 
-
-
 # List all the functions
 az functionapp list
 
@@ -216,4 +214,3 @@ git clone 'https://<username>:<password>@name.scm.azurewebsites.net/repo-name.gi
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-application-proxy.md

@@ -42,4 +42,3 @@ Get-ApplicationProxyAssignedUsersAndGroups -ObjectId <object-id>
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-arm-templates.md

@@ -33,4 +33,3 @@ cat <PATH TO .json FILE> | Select-String password
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-automation-account/README.md

@@ -180,4 +180,3 @@ $response = Invoke-WebRequest -Method Post -Uri $uri -Body $body
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-automation-account/az-state-configuration-rce.md

@@ -67,4 +67,3 @@ The successful execution of this process opens numerous possibilities for furthe
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-azuread.md

@@ -1033,4 +1033,3 @@ The default mode is **Audit**:
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-file-shares.md

@@ -174,4 +174,3 @@ Same as storage persistence:
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-function-apps.md

@@ -268,4 +268,3 @@ az rest --url "https://management.azure.com/<subscription>/resourceGroups/<res-g
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-logic-apps.md

@@ -71,4 +71,3 @@ Get-AzLogicApp -ResourceGroupName <ResourceGroupName> -Name <LogicAppName>
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-management-groups-subscriptions-and-resource-groups.md

@@ -58,4 +58,3 @@ az group list --subscription "<subscription>" --output table
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-queue-enum.md

@@ -97,4 +97,3 @@ $queueMessage.Value
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-servicebus-enum.md

@@ -102,4 +102,3 @@ az servicebus namespace authorization-rule keys list --resource-group <MyResourc
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-sql.md

@@ -263,4 +263,3 @@ sqlcmd -S <sql-server>.database.windows.net -U <server-user> -P <server-passwork
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-storage.md

@@ -439,4 +439,3 @@ az-file-shares.md
 
 
 
-

src/pentesting-cloud/azure-security/az-services/az-table-storage.md

@@ -111,4 +111,3 @@ Same as storage persistence:
 
 
 
-

src/pentesting-cloud/azure-security/az-services/intune.md

@@ -33,4 +33,3 @@ The execution of the script can take up to **one hour**.
 
 
 
-

src/pentesting-cloud/azure-security/az-services/keyvault.md

@@ -186,4 +186,3 @@ done
 
 
 
-

src/pentesting-cloud/azure-security/az-services/vms/README.md

@@ -863,4 +863,3 @@ Invoke-AzureRmVMBulkCMD -Script Mimikatz.ps1 -Verbose -output Output.txt
 
 
 
-

src/pentesting-cloud/azure-security/az-services/vms/az-azure-network.md

@@ -466,4 +466,3 @@ Get-AzExpressRouteCircuit
 
 
 
-

src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/README.md

@@ -250,4 +250,3 @@ az-password-spraying.md
 
 
 
-

src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-device-code-authentication-phishing.md

@@ -9,4 +9,3 @@
 
 
 
-

src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-oauth-apps-phishing.md

@@ -153,4 +153,3 @@ Check the Applications and Service Principal sections of the page:
 
 
 
-

src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-password-spraying.md

@@ -37,4 +37,3 @@ Invoke-PasswordSprayGmail -UserList .\userlist.txt -Password Fall2016 -Threads 1
 
 
 
-

src/pentesting-cloud/azure-security/az-unauthenticated-enum-and-initial-entry/az-vms-unath.md

@@ -43,4 +43,3 @@ az vm extension image list --publisher "Site24x7" --output table
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/README.md

@@ -45,4 +45,3 @@ do-services/
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-basic-information.md

@@ -137,4 +137,3 @@ The **logs of a team** can be found in [**https://cloud.digitalocean.com/account
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-permissions-for-a-pentest.md

@@ -9,4 +9,3 @@ DO doesn't support granular permissions. So the **minimum role** that allows a u
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/README.md

@@ -21,4 +21,3 @@ DO offers a few services, here you can find how to **enumerate them:**
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-apps.md

@@ -36,4 +36,3 @@ That will give you a **shell**, and just executing **`env`** you will be able to
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-container-registry.md

@@ -35,4 +35,3 @@ doctl registry repository list-v2
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-databases.md

@@ -45,4 +45,3 @@ doctl databases pool list <db-id> # List pools of DB
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-droplets.md

@@ -83,4 +83,3 @@ It's also possible to launch a **recovery console** to run commands inside the h
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-functions.md

@@ -62,4 +62,3 @@ doctl serverless activations result <activation-id> # get only the response resu
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-images.md

@@ -21,4 +21,3 @@ doctl compute image list
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-kubernetes-doks.md

@@ -41,4 +41,3 @@ doctl kubernetes cluster list-associated-resources <cluster-id>
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-networking.md

@@ -47,4 +47,3 @@ doctl compute firewall remove-droplets <fw-id> --droplet-ids <droplet-id>
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-projects.md

@@ -25,4 +25,3 @@ doctl projects resources list <proj-id> # Get all the resources of a project
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-spaces.md

@@ -48,4 +48,3 @@ aws s3 ls --endpoint=https://fra1.digitaloceanspaces.com s3://uniqbucketname
 
 
 
-

src/pentesting-cloud/digital-ocean-pentesting/do-services/do-volumes.md

@@ -17,4 +17,3 @@ compute volume list
 
 
 
-

src/pentesting-cloud/gcp-security/README.md

@@ -247,4 +247,3 @@ gcloud config unset auth/access_token_file
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-basic-information/README.md

@@ -232,4 +232,3 @@ As defined by terraform in [https://registry.terraform.io/providers/hashicorp/go
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-basic-information/gcp-federation-abuse.md

@@ -155,4 +155,3 @@ jobs:
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-permissions-for-a-pentest.md

@@ -146,4 +146,3 @@ roles/bigquery.metadataViewer
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/README.md

@@ -4,4 +4,3 @@
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-api-keys-persistence.md

@@ -23,4 +23,3 @@ Check how to do this in:
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-app-engine-persistence.md

@@ -23,4 +23,3 @@ If yoi could just modify the code of a running version or create a new one yo co
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-artifact-registry-persistence.md

@@ -44,4 +44,3 @@ https://book.hacktricks.xyz/pentesting-web/dependency-confusion
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-bigquery-persistence.md

@@ -23,4 +23,3 @@ Grant further access over datasets, tables, rows and columns to compromised user
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-functions-persistence.md

@@ -21,4 +21,3 @@ For more info about Cloud Functions check:
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-run-persistence.md

@@ -27,4 +27,3 @@ Create a backdoored Service or Job
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-shell-persistence.md

@@ -71,4 +71,3 @@ But you can find further information in [https://github.com/FrancescoDiSalesGith
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-cloud-sql-persistence.md

@@ -39,4 +39,3 @@ For more information check the technique in:
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-compute-persistence.md

@@ -21,4 +21,3 @@ For more informatoin about Compute and VPC (Networking) check:
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-dataflow-persistence.md

@@ -55,4 +55,3 @@ gcloud dataflow $NAME_TEMPLATE run testing \
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-filestore-persistence.md

@@ -23,4 +23,3 @@ gcp-filestore-persistence.md
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-logging-persistence.md

@@ -23,4 +23,3 @@ gcloud logging sinks create <sink-name> <destination> --log-filter="FILTER_CONDI
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-non-svc-persistance.md

@@ -106,4 +106,3 @@ Some remediations for these techniques are explained in [https://www.netskope.co
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-secret-manager-persistence.md

@@ -24,4 +24,3 @@ An attacker could update the secret to:
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-persistence/gcp-storage-persistence.md

@@ -40,4 +40,3 @@ Another exploit script for this method can be found [here](https://github.com/Rh
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-post-exploitation/README.md

@@ -4,4 +4,3 @@
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-app-engine-post-exploitation.md

@@ -45,4 +45,3 @@ Modify source code to steal credentials if they are being sent or perform a defa
 
 
 
-

src/pentesting-cloud/gcp-security/gcp-post-exploitation/gcp-artifact-registry-post-exploitation.md

@@ -23,4 +23,3 @@ The Post Exploitation and Privesc techniques of Artifact Registry were mixed in:
 
 
 
-