gcp-dhcp-takeover-code-exec
gcp-dhcp-takeover-code-exec copied to clipboard
irsl
Google Compute Engine (GCE) VM takeover via DHCP flood - gain root access by getting SSH keys added by google_guest_agent
when testing the POC on my environment i couldn't find takeover-at-reboot.pl. Is it the same as takeover.pl? do you have any reference number for min_ts and max_ts? thanks
Google changed the script "google_set_hostname": https://github.com/GoogleCloudPlatform/guest-configs/commit/fac404b447e7dee8813bca13b37436a23add5b18#diff-5b7b2f3606d3cd6fc72670c3a7a34873df730bab794d3004382d34240fff1be8 This has been release with the new image version: https://console.cloud.google.com/compute/imagesDetail/projects/debian-cloud/global/images/debian-10-buster-v20210701 To verify that the change is in the image follow these steps: * create...
Apologies if I have misunderstood something here, but in my tests, if I have Google firewall rules in place denying ingress on UDP port 68 (or no rules explicilty allowing...
