The Overlooked Playground: An Attacker's Journey Through GCP

No ratings

Presented at Hackfest 2025 by

Clément Cruchet

This talk provides a comprehensive, attacker-focused exploration of Google Cloud Platform (GCP) security, mapping a full offensive kill chain against the MITRE ATT&CK® framework. We will demonstrate practical techniques for initial access, lateral movement, privilege escalation, and data exfiltration within complex GCP environments. The presentation culminates by pivoting to the defender's view, where we will visualize the entire attack path using Prisma Cloud. From this unified perspective, we will derive actionable best practices and introduce detection and response strategy, empowering attendees to better secure their own cloud infrastructure.