InR3d Buck3TbyNairuz Abulhul·May 4, 2025GCP Privilege Escalation: Abusing Function Admin Role for Full Project TakeoverLearn how attackers can escalate privileges in Google Cloud by exploiting misconfigured function role to gain Owner-level access
InInfoSec Write-upsbyNairuz Abulhul·Feb 8, 2025Stealing Accesses tokens from Cloud Functions in GCPHow Attackers Leverage Serverless Functions to Escalate Privileges and Move Laterally
InR3d Buck3TbyNairuz Abulhul·Feb 7, 2025Abusing Compute Instance IAM Misconfigurations to Gain Privileges in GCPExploiting misconfigured IAM roles on GCP Compute Instances to obtain additional access and escalate privileges
InR3d Buck3TbyNairuz Abulhul·Feb 3, 2025Stealing Cloud Function Access Tokens with Misconfigured IAM Policy [GCP]How Misconfigured IAM Policies in Google Cloud Can Lead to Cloud Function Access Token Exposure and Exploitation
InR3d Buck3TbyNairuz Abulhul·May 22, 2024Payload Delivery with Azure Static Website and IPFS DropperWeaponizing InterPlanetary File System and Azure Sites
InR3d Buck3TbyNairuz Abulhul·May 13, 2024Configure Fireprox for IP Rotation using AWS API GatewayUnlock the power of the AWS API gateway with Fireprox configuration
InInfoSec Write-upsbyNairuz Abulhul·May 10, 2024Red Teaming with Azure: Building C2 Infrastructure with Azure VMsA Step-by-Step Guide to Deploying C2 VMs
InR3d Buck3TbyNairuz Abulhul·Apr 30, 2024Adding Certificates to Postman & Burp Suite for API TestingTesting APIs with Certificate-based authentication
InInfoSec Write-upsbyNairuz Abulhul·Jan 16, 2024Exploiting Misconfigurations in Windows Service PermissionsA Closer Look at Common Misconfigurations in Windows Service Permissions for Privilege Escalation
InR3d Buck3TbyNairuz Abulhul·Jan 11, 2024Red Teaming in Cloud: Leverage Azure FrontDoor CDN for C2 RedirectorsEvading Detection: Obfuscating C2 Infrastructure with Azure FrontDoor
![Stealing Cloud Function Access Tokens with Misconfigured IAM Policy [GCP]](https://miro.medium.com/v2/resize:fill:160:106/1*L2XyMp0-YDdNFnKuAry3fA.jpeg)
![Stealing Cloud Function Access Tokens with Misconfigured IAM Policy [GCP]](https://miro.medium.com/v2/resize:fill:320:214/1*L2XyMp0-YDdNFnKuAry3fA.jpeg)
