Back to directory
WRITEUP #651

Unauthenticated Access to GCP Dataproc Can Lead to Data Leak

CloudData leakPost-exploitation
by@roinisimi(Roi Nisimi)
Program
Google (GCP)
Published
Dec 12, 2023
Added to HackDex
Jan 29, 2024
Read Full Writeuphttps://orca.security/resources/blog/unauthenticated-access-to-google-cloud-dataproc/
▸ RELATED WRITEUPS
The Hunt for ALBeast: A Technical Walkthrough
CloudAWS ALB
Addressed AWS defaults risks: OIDC, Terraform and Anonymous to AdministratorAccess
CloudOIDC
Double Agent: Exploiting Pass-through Authentication Credential Validation in Azure AD
CloudPrivilege escalation
CVE-2024-38428 Wget Vulnerability: All you need to know
SSRFMiTM
Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources
CloudRCE

Built with ❤️ by Shubham Rawat