Skip to content

Latest commit

 

History

History
63 lines (42 loc) · 3.55 KB

File metadata and controls

63 lines (42 loc) · 3.55 KB

GCP - Batch Enum

{% hint style="success" %} Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks
{% endhint %}

Basic Information

Google Cloud Platform (GCP) Batch Service is designed for running large-scale batch computing workloads, automating the management, scheduling, and execution of batch jobs across scalable cloud resources. This service simplifies operations and optimizes costs by allowing users to leverage preemptible VMs and integrates seamlessly with other GCP services for comprehensive batch processing workflows. It's ideal for data processing, financial modeling, and scientific simulations.

Service Account

Although (currently) it's not possible to select the SA that the batch job will be executed with, it'll use the compute SA (Editor permissions usually).

Enumeration

{% code overflow="wrap" %}

# List jobs
gcloud batch jobs list

# Get job info
gcloud batch jobs describe <job-name> --location <location>

# List tasks
gcloud batch tasks list --location <location> --job <job-name>

# Gte info of tasks executions
gcloud batch tasks describe projects/<proj-number>/locations/<location>/jobs/<job-name>/taskGroups/<group>/tasks/<num>

{% endcode %}

Privilege Escalation

{% content-ref url="../gcp-privilege-escalation/gcp-batch-privesc.md" %} gcp-batch-privesc.md {% endcontent-ref %}

{% hint style="success" %} Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks
{% endhint %}