New Exploits Target Google Cloud and Search Engine Vulnerabilities

• •The 'gcp_scanner' tool evaluates GCP credential access levels.
• •The 'google_explorer' automates Google searches to find vulnerable sites.
• •Both tools are designed for exploitation and can lead to unauthorized access.

Two new exploits have emerged targeting Google Cloud Platform (GCP) and Google Search. The 'gcp_scanner' tool allows attackers to assess access levels of GCP credentials, including service account keys and OAuth2 tokens, potentially leading to unauthorized access. Meanwhile, the 'google_explorer' exploit automates searches on Google to identify vulnerable sites using specific 'dorks' and plugins. Both tools are designed for Linux environments, with 'gcp_scanner' being a standalone tool and 'google_explorer' requiring browser drivers. The impact of these tools could be significant, as they facilitate the discovery and exploitation of vulnerabilities in cloud and web applications. Security professionals are urged to assess their GCP configurations and monitor for potential misuse of these tools.