GATOR - GCP Attack Toolkit for Offensive Research, a tool designed to aid in research and exploiting Google Cloud Environments
GATOR - GCP Attack Toolkit for Offensive Research, a tool designed to aid in research and exploiting Google Cloud Environments. It offers a comprehensive range of modules tailored to support users in various attack stages, spanning from Reconnaissance to Impact.
Tactic | Resource | Modules | Description |
Recon | Cloud Functions | list-function | List Functions. |
Cloud IAM | custom-roles | List Custom Roles. | |
Cloud Storage | storage-tree | List Storage Buckets & Object (Tree). | |
Cloud SQL | cloudsql-list | List Cloud SQL Instances. | |
Privilege Escalation | Cloud Functions | function-deploy | PrivEsc via Deploying Cloud Function. |
Persistence | Cloud IAM | service-account-keys | Persistence via Downloading Service Account Key(s). |
Other | Cloud IAM | createroles | Create Custom Roles. |
Cloud IAM | createsa | Create Service Accounts. |
Have a look at the GATOR Gitbook for documentation and guide on using GATOR and it's module!
python --version
sudo docker run -v /tmp:/tmp -it anrbn/gator:latest
mkdir /tmp/GATOR
git clone https://github.com/anrbn/GATOR.git
cd GATOR/
pip3 install -r requirements.txt
python3 gator.py
sudo docker pull anrbn/gator:latest
sudo docker run -v /tmp:/tmp -it anrbn/gator:latest
If you encounter any problems with this tool, I encourage you to let me know. Here are the steps to report an issue:
Check Existing Issues: Before reporting a new issue, please check the existing issues in this repository. Your issue might have already been reported and possibly even resolved.
Create a New Issue: If your problem hasn't been reported, please create a new issue in the GitHub repository. Click the Issues tab and then click New Issue.
Describe the Issue: When creating a new issue, please provide as much information as possible. Include a clear and descriptive title, explain the problem in detail, and provide steps to reproduce the issue if possible. Including the version of the tool you're using and your operating system can also be helpful.
Submit the Issue: After you've filled out all the necessary information, click Submit new issue.
Your feedback is important, and will help improve the tool. I appreciate your contribution!
I'll be reviewing reported issues on a regular basis and try to reproduce the issue based on your description and will communicate with you for further information if necessary. Once I understand the issue, I'll work on a fix.
Please note that resolving an issue may take some time depending on its complexity. I appreciate your patience and understanding.
I warmly welcome and appreciate contributions from the community! If you're interested in contributing on any existing or new modules, feel free to submit a pull request (PR) with any new/existing modules or features you'd like to add.
Once you've submitted a PR, I'll review it as soon as I can. I might request some changes or improvements before merging your PR. Your contributions play a crucial role in making the tool better, and I'm excited to see what you'll bring to the project!
Thank you for considering contributing to the project!
If you have any questions regarding the tool or any of its modules, please check out the documentation first. I've tried to provide clear, comprehensive information related to the tools and all of its modules. If however your query is not yet solved or you have a different question altogether please don't hesitate to reach out to me via Twitter or LinkedIn. I'm always happy to help and provide support. :)