Google Give Me Vulnz
summary
Manual Burp Suite tests and simple ID-swapping expose concrete failures: 175 valid Google VRP submissions (160 were IDORs) show it’s possible to gain access to every Google Workspace org's Play Store admin panel by changing the org ID and push malicious APK updates to devices, to leak email subject logs for all orgs by pointing their BigQuery export to an attacker project, and to download any Google Ads uploaded file via a crafted URL. All issues are reported and fixed.
AI-written summary · about
chapters (10)
- 0:00Introduction and background
- 3:26Understanding IDOR
- 6:51Using Burp Suite
- 9:24Overview of target products
- 13:01Exploiting Google Workspace
- 18:36Leaking Gmail logs
- 20:40Vulnerabilities in Google Ads
- 22:32Leaking Google Ads files
- 26:05IDOR remediation and conclusion
- 28:38Q&A session
related talks
48mThe Accidental Discovery of a New Vulnerability in Google's OAuth Implementation
29mBest Of Google VRP 2018
22mThe Silent Breach: Security Threats in Google Workspace
39mHacking Google - Lessons learned running and growing an internal red team
43mPrivilege Escalation via Impersonation
44mLive Hacking Cloud Architectures
39m"Inter-application" vulnerabilities - hunting for bugs in..."
41mOverview of common Android app vulnerabilities