IAM Concerned: OAuth Token Hijacking in Google Cloud (GCP)
Engineers explore architecture and security mechanisms for IAM Concerned: OAuth Token Hijacking in Google Cloud (GCP).
Summary
OAuth token hijacking in Google Cloud IAM.
Related talks
Main Stage·24 min
Sharon Brizinov · Tal Skverer
Tal Skverer details GhostToken, a critical zero-day vulnerability in Google Cloud Platform allowing third-party OAuth apps to become invisible and unremovable.
Main Stage·40 min
Dylan Ayrey · Allison Donovan
Dylan Ayrey and Allison Donovan dissect Google Cloud Platform's security model, exploiting default service account permissions and `actAs` delegation to escalate privileges.
Main Stage·27 min
Dylan Ayrey · Allison Donovan
Dylan Ayrey and Allison Donovan answer questions regarding Google Cloud IAM nuances, default service accounts, and cloud lateral movement.