stratus-red-team
stratus-red-team copied to clipboard
New technique: Register SSH public key to project metadata
What does this PR do?
- add new technique: Register SSh public key to project metadata
Lateral movement to any Cloud Compute instance by registering public key to project's metadata. This technique is affecting any instance on same project.
Motivation
This technique is developed as part of Grab's purple teaming activity and we want to share it so more people can get the benefit.
Co-authored-by: Satria Ady Pradana [email protected]