writeups.xyz / How I hacked into Google’s internal corporate assets

Submitter : c2a

Date: 25 February 2024

Bounty : undisclosed

Vulnerabilities :

• Dependency Confusion
• RCE
• Supply Chain Attack

Programs :

• Google

Authors :

• Michael Hyndman

Link :
https://observationsinsecurity.com/2024/04/25/how-i-hacked-into-googles-internal-corporate-assets/