Get 20% off all career paths from fullstack to AI
Live Online Classes in Design, Coding & AI — Small Classes, Free Retakes
Overview
AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Explore a critical security vulnerability in Google Cloud Platform's Cloud Shell feature in this 17-minute conference talk from BSidesLV. Delve into an abuse methodology that exploits an unexpected public-facing port, allowing attackers to bypass Google authentication and potentially leak data, deliver malicious content, or pivot attack traffic through the Google network. Learn how the manipulation of Linux Netfilter's NAT table can be used to serve various internally running services within the Cloud Shell container to the public, despite the instance's short lifespan. Gain insights into the security risks associated with granting excessive permissions in cloud environments and understand the implications for both administrators and developers using cloud service providers.
Syllabus
Common Ground, Wed, Aug 7, 16:30 - Wed, Aug 7, CDT
Taught by
BSidesLV