Hacker GitHub

← All repos

irsl/gcp-dhcp-takeover-code-exec

View on GitHub ↗ ★ 536 Go

Google Compute Engine (GCE) VM takeover via DHCP flood - gain root access by getting SSH keys added by google_guest_agent

7 mentions on Hacker News by 6 people: 2 stories, 5 comments · first 2021-06-28 · latest 2022-11-10

Mentions per year 7 mentions · busiest year 2021 (5)
20082026
AllStoriesComments NewestTopOldest
  1. …Here's another example of a critical vulnerability in GCP that Google sat on for 9 months: https://github.com/irsl/gcp-dhcp-takeover-code-exec
    comment by cle · 2022-11-10 · in Accidental Google Pixel Lock Screen Bypass
  2. …is really fast. It reminds me of the Google DHCP takeover vuln that Google sat on for 9 months ( https://github.com/irsl/gcp-dhcp-takeover-code-exec ).
    comment by cle · 2022-01-13 · in BreakingFormation: AWS CloudFormation Vulnerability
  3. They did test that scenario https://github.com/irsl/gcp-dhcp-takeover-code-exec#attack-3
    comment by pmontra · 2021-06-29 · in Google Compute Engine VM takeover via DHCP flood
  4. …or random GCP VM that happens to share your subnet? Seems like pretty different risk levels... https://github.com/irsl/gcp-dhcp-takeover-code-exec#attack-s...
    comment by asah · 2021-06-29 · in Google Compute Engine VM takeover via DHCP flood
  5. He reported the issue first on 2020-09-26 [0], nearly a year ago. [0] https://github.com/irsl/gcp-dhcp-takeover-code-exec#timeline
    comment by Sebb767 · 2021-06-29 · in Google Compute Engine VM takeover via DHCP flood
  6. ▲ 498
    Google Compute Engine VM takeover via DHCP flood
    story by ithkuil · 2021-06-29 · 174 comments
  7. ▲ 17
    Google Compute Engine (GCE) VM “remote” root exploit via DHCP flood
    story by xdavidhu · 2021-06-28 · 0 comments