$100k Hacking Prize Nominations - Google Cloud Platform
Added 2020-03-11 13:01:32 +0000 UTCIn 2019, Google announced the GCP Prize. 100.000$ for the best bug bounty report for the Google Cloud Platform. Today we will have a technical look at the nominations. We look for patterns and analyze the type of bugs.
Blog: https://security.googleblog.com/2020/03/announcing-our-first-gcp-vrp-prize.html
Nominations:
- [Obmi] The File uploading CSRF in Google Cloud Shell Editor: https://obmiblog.blogspot.com/2019/12/gcp-5k-file-uploading-csrf.html
- [Wouter] 4 Google Cloud Shell bugs explained: https://offensi.com/2019/12/16/4-google-cloud-shell-bugs-explained-introduction/
- [Psi] CSWSH vulnerability in Google Cloud Shell’s code editor: https://xn--9xa.fun/i/yvpMj
Google Stuff:
- Google Security Blog: https://security.googleblog.com/
- GCP Price Blog Post: https://security.googleblog.com/2019/08/awarding-google-cloud-vulnerability.html
- Video with Wouter about Cloud Shell: https://www.youtube.com/watch?v=E-P9USG6kLs
