Privilege Escalation via Impersonation
summary
A report on privilege escalation via impersonation in Google Cloud, presenting a creative bug SWAT 2025 case showing how impersonation mechanisms can be abused to gain higher privileges. Covers practical cybersecurity findings and attack details specific to Google Cloud identity and access scenarios.
AI-written summary · about
chapters (11)
- 0:00Privilege escalation intro
- 7:55SOAR attack target selection
- 13:39Vulnerability testing methodology
- 16:05First exploits and reverse shell
- 20:11GCP service accounts
- 24:09Service account impersonation
- 31:53JWT token signing
- 36:34Low-privilege token acquisition
- 39:04Full attack scenario
- 40:31Google response and rewards
- 42:41Key takeaways and summary
related talks
48mThe Accidental Discovery of a New Vulnerability in Google's OAuth Implementation
45mLive Hacking Cloud Architectures
34mHijacking Google’s CI/CD Through Prompt Injection:The New Era of AI-Based Exploits
22mThe Silent Breach: Security Threats in Google Workspace
30mGoogle Give Me Vulnz
44mLive Hacking Cloud Architectures
13mBreaching the sky’s limit on your cloud: privilege escalation in Kubernetes
50mBeyond the Pod: Privilege Escalation in Kubernetes