3 ms·

I wonder if they have actually tested the last scenario: > Targeting a VM over the internet. This requires the firewall in front of the victim VM to be fully o

I wonder if they have actually tested the last scenario: > Targeting a VM over the internet. This requires the firewall in front of the victim VM to be fully open. I mean, even if the firewall is non-existing, can you really carry a dhcp payload over the public internet? EDIT: still haven't read the whole thing, but looks like they did test it

pmontra 5y ago
They did test that scenario https://github.com/irsl/gcp-dhcp-takeover-code-exec#attack-3 https://github.com/irsl/gcp-dhcp-takeover-code-exec#attack-3
- tryauuum 5y ago
  Google should probably block these kind of packets, anything from/to udp ports 67/68. Might be a little harsh, but secure