discovered 03 Aug 2026
gcpwn
→ View on GitHubGCPwn is a framework for conducting offensive security assessments on Google Cloud environments, facilitating credential handling, service enumeration, and attack-path analysis through graph-based outputs. It supports workflows for reconnaissance, exploitation, and data collection, allowing users to execute predefined exploitation modules and export findings in various formats. Notable features include extensive API behavior tracking, IAM analysis, and the ability to generate OpenGraph outputs for privilege escalation reviews.