Contact Us

NetSPI   »   Presentations

Def Con 32 – GCPwn | Scott Weston

Conference: DEF CON > DEF CON 32
Category: Cloud Pentesting

NetSPI Speakers

Scott Weston

Date: August 9, 2024
Location: Las Vegas, US

Resources

Watch Video
Related
DEF CON 32 An Introduction to GCPwn – Part 1 An Introduction to GCPwn – Parts 2 and 3 DEF CON 32 Recap: Insights and Experiences from The NetSPI Agents 

Abstract

When discussing the various cloud providers within the last decade, Google Cloud Platform (GCP) is often seen as the smaller provider following AWS and Azure with regards to market share. While GCP might appear smaller than its rival cloud providers, it still is very much in use today, and with this use comes the opportunities for developing pentesting tools. This includes enumeration modules for some of the core services (Cloud Storage, Cloud Functions, Cloud Compute, IAM) along with the incorporation of numerous exploit modules, many of them rooted in Rhino Security’s currently public GCP exploit repository.