google / google/gcp_scanner

Explore an option of detecting SA's with DWD

Open
#306 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
370
Forks
114
PR merge metrics
No merged PRs in 30d

Description

[**Is your feature request related to a problem? Please describe.**
There are GCP SA with DWD capabilities. It would be nice to identify them.

**Describe the solution you'd like**
GCP SA flag SA with DWD permissions

**Additional context**
https://www.hunters.security/en/blog/delefriend-a-newly-discovered-design-flaw-in-domain-wide-delegation-could-leave-google-workspace-vulnerable-for-takeover)](https://www.hunters.security/en/blog/delefriend-a-newly-discovered-design-flaw-in-domain-wide-delegation-could-leave-google-workspace-vulnerable-for-takeover

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.