Skip to content
Nuclei Templates

GCP App Engine (Appspot) - Cloud Enumeration

ID: gcp-app-engine-enum

Severity: info

Author: initstring

Tags: enum,cloud,cloud-enum,gcp

Description

Section titled “Description”

Searches for App Engine Apps in GCP.

YAML Source

Section titled “YAML Source”
id: gcp-app-engine-enum


info:
  name: GCP App Engine (Appspot) - Cloud Enumeration
  author: initstring
  severity: info
  description: |
    Searches for App Engine Apps in GCP.
  metadata:
    verified: true
    max-request: 1
  tags: enum,cloud,cloud-enum,gcp


self-contained: true


variables:
  BaseDNS: "appspot.com"
  loginRedirect: "accounts.google.com"


http:
  - raw:
      - |
        GET https://{{wordlist}}.{{BaseDNS}} HTTP/1.1
        Host: {{wordlist}}.{{BaseDNS}}


    redirects: false


    attack: batteringram
    threads: 10


    matchers:
      - type: dsl
        name: "Open GCP App Engine App"
        dsl:
          - "status_code==200"


      - type: dsl
        name: "Protected GCP App Engine App"
        dsl:
          - "status_code==302"
          - contains(location, "login")
        condition: and
# digest: 4b0a00483046022100fce31a63aab6e8bcaf7cb16745a7d23c0e735104e0b6ff47a0c77e2561e4cb4b022100853c57600af362b2fa7bd3e6551df494fa81dd043de250b32406130b65b183da:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

Section titled “Guide to check the vulnerabilities”

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "cloud/enum/gcp-app-engine-enum.yaml"

View on Github