stratus-red-team icon indicating copy to clipboard operation
stratus-red-team copied to clipboard

New technique: Register SSH public key to project metadata

Open xathrya opened this issue 10 months ago • 0 comments

What does this PR do?

  • add new technique: Register SSh public key to project metadata

Lateral movement to any Cloud Compute instance by registering public key to project's metadata. This technique is affecting any instance on same project.

Motivation

This technique is developed as part of Grab's purple teaming activity and we want to share it so more people can get the benefit.


Co-authored-by: Satria Ady Pradana [email protected]

xathrya avatar Mar 07 '25 10:03 xathrya