📢📢📢 Attention bug hunters!
Want to know more about how brutecat found a vulnerability in Google’s internal APIs, bypassing authorization to exploit the GFile library to gain access to internal filesystems and storage?
If yes, check out his blog post 👇
Not everyone who reports to Google Cloud VRP does a writeup, but critical bugs still show up in CVEs and release notes
Made a tool that aggregates both so you can see the types of bugs getting found in GCP
gcp-cves.brutecat.com
