---
id: 7798
title: "An Introduction to GCPwn – Parts 2 and 3"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/cloud-pentesting/introduction-to-gcpwn-parts-2-and-3/"
published_at: "2024-08-21T00:00:00Z"
tags: ["cloud", "cloud-security", "pentesting", "privilege-escalation", "gcp", "gcpwn"]
phying_url: "https://phying.com/item/7798"
lang: en
---

# An Introduction to GCPwn – Parts 2 and 3

## Summary

Parts two and three of the GCPwn series walk a full GCP attack path: user credentials via ADC, service account key generation, cross-project pivoting, and HMAC key abuse for bucket access.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2024-08-21T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/cloud-pentesting/introduction-to-gcpwn-parts-2-and-3/
- **Phying News:** https://phying.com/item/7798