Black Hat · 2025black-hatadvanced
IAM Concerned: OAuth Token Hijacking in Google Cloud (GCP)
Jenko Hwong
Search
Search talks
Shareable results across the archive. Difficulty is beginner, intermediate, advanced, or expert.
Filters+
Year
Conference
Track
Difficulty
Topic
Showing the most common topics.
Black Hat · 2025black-hatadvanced
Permission Mining in GCP
Colin Estep
DEF CON · 2025DC33
No IP, No Problem: Exfiltrating Data Behind IAP
Ariel Kalman
FWD CLOUDSEC · 2025fwd-cloudsec
"Centralizing Identity across AWS, Azure and GCP"
Paul Schwarzenberger
FWD CLOUDSEC · 2025fwd-cloudsec
"GCP Primitive Roles, An indictment"
Kat Traxler
FWD CLOUDSEC · 2025fwd-cloudsec
Permission Mining in GCP
Colin Estep
FWD CLOUDSEC · 2025fwd-cloudsec-europe-2025
Source IP Spoofing in Cloud Logs: A Hands-On Look Across AWS, Azure, and GCP
FWD CLOUDSEC · 2025fwd-cloudsec-north-america-2025
The Good, The Bad, and The Vulnerable: Breaking Down GCP Tenant Projects
FWD CLOUDSEC · 2025fwd-cloudsec-north-america-2025
What Do You Mean, ‘Resource Not Found?’ Demystifying GCP Error Codes for IR & Detections
PROIDEA · 2025proidea-events
CONFidence 2022: Pwning AWS Lambdas & GCP Cloud Functions
Paweł Kusiński
SAINTCON · 2025saintcon
2019 - Bryce Kunz - May the Cloud be with You: Red Teaming GCP (Google Cloud Platform)
Bryce Kunz
BSides · 2025security-bsides-san-francisco
BSidesSF 2020 - The GCP Metadata API (Dylan Ayrey • Allison Donovan)
Black Hat · 2024black-hat-usaexpert
The GCP Jenga Tower: Hacking Millions of Google's Servers With a Single Package (and more)
Liv Matan
FORTINET · 2024fortinet
Securing Global Access with Fortinet and GCP's Network Connectivity Center | Cloud Security
FWD CLOUDSEC · 2024fwd-cloudsec-europe
GCP and AWS identity federation - lessons learned from the […] ~ Marcus Hallberg, Atilla Dulovics
Marcus Hallberg · Atilla Dulovics
FWD CLOUDSEC · 2024fwd-cloudsec-europeadvanced
Service Agents and the Search for Transitive Access in GCP ~ Kat Traxler
FWD CLOUDSEC · 2024fwd-cloudsec-north-america
GCPwn: A Pentesting Tool For GCP
Scott Weston
FWD CLOUDSEC · 2024fwd-cloudsec-north-america
Who Touched My GCP Project? Understanding the Principal Part in Cloud Audit Logs
Gabriel Fried
FWD CLOUDSEC · 2023fwd-cloudsec
Operationalizing GCP’s Asset Inventory for Cloud Enlightenment
Randy Heins · Jeffrey Zhang
DEF CON · 2023DC31
GhostToken: Exploiting GCP to Create Unremovable Trojan Apps
Sharon Brizinov · Tal Skverer
RSAC · 2023rsac-cybersecurity
Common Infrastructure Exploits in AWS/GCP/Azure Servers and Containers
BSides · 2022bsidescharmintermediate
2025 - Cyber Deception in GCP with Generative Traps
Matt Maisel
NAHAMSEC · 2022nahamsec
Cloud Hacking: Google Cloud Platform (GCP)
DEF CON · 2021DC29
Understanding Google Cloud Misconfiguration Using GCP Goat
Joshua