Service Accounts

Cloud Security

GCP Service Account Impersonation and Escalation

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security

GCP Workload Identity and Cloud Functions Security

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory

Group Managed Service Accounts (gMSA) and the KDS Root Key

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory

Timeroasting: Abusing NTP Authentication in Active Directory

Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security

GCP Privilege Escalation: Abusing Service Account Impersonation and IAM Misconfigurations

How attackers abuse actAs, setIamPolicy, and service account impersonation to escalate privileges in Google Cloud, with blue-team defenses.