在GCP实例中检测与缓解CVE-2024-6387漏洞：第一部分

#!/bin/bash

# 功能：列出组织中的所有项目
list_all_projects() {
  gcloud projects list --format="value(projectId)"
}

# 功能：检查特定API是否在项目中启用
is_api_enabled() {
  local project=$1
  local api=$2
  gcloud services list --project="$project" --filter="name:$api" --format="value(name)"
}

# 功能：列出给定项目中的所有实例
list_instances() {
  local project=$1
  gcloud compute instances list --project="$project" --format="json"
}

# 主函数
main() {
  # 创建或清空用于存储公网IP的文件
  output_file="public_ips.txt"
  ip_only_file="ip_addresses.txt"
  : > "$output_file"
  : > "$ip_only_file"

  # 获取所有项目的列表
  projects=$(list_all_projects)

  for project in $projects; do
    echo "Processing Project: $project"

    # 检查项目是否启用了Resource Manager API
    if [[ -z "$(is_api_enabled "$project" "cloudresourcemanager.googleapis.com")" ]]; then
      echo "Resource Manager API is not enabled for project $project. Skipping..."
      continue
    fi

    # 检查项目是否启用了Compute Engine API
    if [[ -z "$(is_api_enabled "$project" "compute.googleapis.com")" ]]; then
      echo "Compute Engine API is not enabled for project $project. Skipping..."
      continue
    fi

    # 获取当前项目中的所有实例列表
    instances=$(list_instances "$project")

    # 检查是否存在任何实例
    if [[ "$instances" != "[]" ]]; then
      # 遍历每个实例并提取公网IP
      for instance in $(echo "$instances" | jq -r '.[] | @base64'); do
        _jq() {
          echo ${instance} | base64 --decode | jq -r ${1}
        }
        instance_name=$(_jq '.name')
        zone=$(_jq '.zone' | awk -F/ '{print $NF}')
        public_ips=$(_jq '.networkInterfaces[].accessConfigs[]?.natIP')

        # 检查是否存在公网IP并写入输出文件
        if [[ -n "$public_ips" ]]; then
          for ip in $public_ips; do
            echo "$project,$zone,$instance_name,$ip" >> "$output_file"
            echo "$ip" >> "$ip_only_file"
          done
        fi
      done
    fi
  done

  echo "Public IPs have been written to $output_file"
  echo "IP addresses have been written to $ip_only_file"
}

main

git clone https://github.com/xaitax/CVE-2024-6387_Check.git
cd CVE-2024-6387_Check
cp ../ip_addresses.txt CVE-2024-6387_Check
python CVE-2024-6387_Check.py -l ip_addresses.txt