New attack technique: Backdoor a GCS Bucket via Overly Permissive IAM Policy (gcp.exfiltration.backdoor-gcs-bucket)#800

Open

Minosity-VR wants to merge 12 commits into

simon.marechal/gcp-execution-os-config-run-commandfrom

simon.marechal/gcp-exfiltration-backdoor-gcs-bucket

Commits on Apr 9, 2026

New attack technique: Modify a GCE Instance Startup Script (gcp.execution.modify-gce-startup-script)

Minosity-VR
and
claude
committed
Add external references for technique documentation

Minosity-VR
and
claude
committed
Address PR feedback: remove HackTricks refs, regenerate docs

Minosity-VR
and
claude
committed
New attack technique: Inject a Malicious Startup Script into a Vertex AI Workbench Instance (gcp.execution.modify-vertex-notebook-startup)

Minosity-VR
and
claude
committed
Add external references for technique documentation

Minosity-VR
and
claude
committed
Address PR feedback: remove HackTricks refs, regenerate docs

Minosity-VR
and
claude
committed
New attack technique: Execute Commands on GCE Instances via OS Config Agent (gcp.execution.os-config-run-command)

Minosity-VR
and
claude
committed
Add external references for technique documentation

Minosity-VR
and
claude
committed
Address PR feedback: remove HackTricks refs, regenerate docs

Minosity-VR
and
claude
committed
New attack technique: Backdoor a GCS Bucket via Overly Permissive IAM Policy (gcp.exfiltration.backdoor-gcs-bucket)

Minosity-VR
and
claude
committed
Add external references for technique documentation

Minosity-VR
and
claude
committed
Address PR feedback: remove HackTricks refs, regenerate docs

Minosity-VR
and
claude
committed