Skip to content

Latest commit

 

History

History
33 lines (21 loc) · 2.37 KB

File metadata and controls

33 lines (21 loc) · 2.37 KB

GCP - Composer Privesc

Support HackTricks and get benefits!

composer

composer.environments.create

It's possible to attach any service account to the newly create composer environment with that permission. Later you could execute code inside composer to steal the service account token.

More info about the exploitation here.

Support HackTricks and get benefits!