Posts

Becoming A Super Admin In Someone Elses Gsuite Organization And Taking It Over

-
 Hello All! Long time since I have posted here :) As most of you know I am planning on writing up a lot of my research I have done through Microsoft Bug Bounty program over the years. Still trying to figure out exactly the best approach and reports to writeup. However in the mean time I will be providing some of my research from Google over the years. Microsoft and Google were the 2 main programs I hunted on over the years and Googles program resulted in some fruitful research as well :) So as a result today I present how it was possible to add yourself as a Gsuite Super Admin to someone else's Gsuite account. POC: So for those that do not know Gusite is a suite of products offered by Google for organizations and education institutions for example. It is similar to Microsofts offering of O365. Now in Gsuite the main admins of the organization are super admins. They are exactly what they sound like. Have Super Admin privileges over everything. They can create group, manage users, ch
Post a Comment
Read more

Gsuite Hangouts Chat 5k IDOR

-
Hello everyone, So as most of you should see the Google VRP has started doing a bug of the week promotion. One of my submissions has been selected for this week so here we are. This is a write up about a IDOR I found back in March affecting chat.google.com. Back in March after scrolling through twitter I noticed Google Chat was trending. Immediately I thought it was a new product being pushed and started to read some of the posts about it. After looking into it the product was a new team collaboration chat room for gsuite customers and their users to message each other in. Just like most bug hunters when you see a new product being rolled out its time to go and test it. I then setup my gsuite account and went to chat.google.com. Now this was a chat area and as a result of this xss was the first thing I was testing. I did not find anything related to that but maybe someone else did ;). Since it was a new feature though I was pretty determined it had to have something so I laun
Read more