One Port to Serve Them All - Google GCP Cloud Shell Abuse
Where
Common Ground
BSides Las Vegas
Duration
17 min
Examines how a single port can be abused in Google Cloud Shell, the browser-based environment for GCP.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Common Ground·24 min
Kat Traxler
Compares provider-managed non-human identities across AWS, Google Cloud and Microsoft, and where each one is vulnerable.
cloudidentityvulnerabilities+2
Main Stage·47 min
J Hwong · C Ryan
Reverses the private APIs behind AWS, Azure, and GCP CloudShell to show how unmanaged cloud terminals can be abused for free compute, staging, and persistence.
cloudidentityattack+2
Proving Ground·23 min
Ben Kofman · Ali Kabeel
Walks through four ways attackers can exploit SaaS data platforms, from access control flaws to abusing serverless scaling.
cloudattackvulnerabilities+2