Intro to GCP Pentesting: Misconfigured Storage Bucket, IAM Enumeration, and Privilege Escalation

In this video, we will cover some basic GCP concepts and then delve into the pentesting aspect. We'll explore a misconfigured storage bucket on GCP and demonstrate how to use SSRF to gain initial access. From there, we'll perform IAM enumeration on GCP. Additionally, we will discuss two different privilege escalation methods. Timecodes 0:00 -Intro 0:30 -Whoami 1:00 -Prerequisite 1:40 -Some GCP Basic 2:23 -IAM Basics 4:49 -IAM Basics Demo 20:39 -Compute Engine Basics 22:24 -Compute Engine Demo 34:39 -ServerLess Basics 36:59 -Serverless Demo 48:04 -The Real Deal 58:09 -GCP Storage Bucket (Hacking) 1:04:19 -SSRF 1:27:29 -Iam enumeration 1:54:44 -Privilege Escalation #gcp #googlecloud #pentesting #cybersecurity #infosec