Cloud Compute
Abusable GCP Cloud Compute permissions that can lead to compromise or privilege escalation
compute.instances.osLogin || compute.instances.osAdminLogin
## Confirm OS Login is enabled on an instance
gcloud compute instances describe <INSTANCE_NAME> --zone=<ZONE> --format=json | jq -r '.metadata[]'
[SNIP]
[
{
"key": "enable-oslogin",
"value": "TRUE"
},
[SNIP]## Connect via SSH
gcloud compute ssh <INSTANCE_NAME> --zone=<ZONE>compute.instances.attachDisk
compute.instances.setMetadata
osconfig.patchJobs.exec
Last updated