Hacking the Cloud on Mythryl: “ICYMI: A look at how a familiar container escape pattern shows up in…”

ICYMI: A look at how a familiar container escape pattern shows up in GCP Cloud Workstations. We trace a path from a container to service account. If you’re using Cloud Workstations, this is a useful model to keep in mind.

buff.lyGCP Cloud Workstations Privilege Escalation - Hacking The CloudBreak out of a Cloud Workstations container through an exposed Docker socket, then access project credentials from instance metadata.

16/2/26, 3:03 pm0 reposts1 like

Post