Conversation with a bug bounty hunter about a vulnerability found in Google Cloud Shell. This video is sponsored by Google (Vulnerability Rewards Program) ↓ Check the links Google VRP: https://www.google.com/about/appsecurity/reward-program/ Cloud Shell PoC exploit (fixed): https://github.com/offensi/LiveOverflow-cloudshell-poc Cloud Shell docker "escape": https://github.com/offensi/LiveOverflow-cloudshell-stuff Theia IDE: https://theia-ide.org/ wtm: https://twitter.com/wtm_offensi =[ ❤️ Support ]= → per Video: https://www.patreon.com/join/liveoverflow → per Month: null =[ 🔴 Stuff I use ]= → Microphone:* https://geni.us/ntg3b → Graphics tablet:* https://geni.us/wacom-intuos → Camera#1 for streaming:* https://geni.us/sony-camera → Lens for streaming:* https://geni.us/sony-lense → Connect Camera#1 to PC:* https://geni.us/cam-link → Keyboard:* https://geni.us/mech-keyboard → Old Microphone:* https://geni.us/mic-at2020usb US Store Front:* https://www.amazon.com/shop/liveoverflow =[ 🐕 Social ]= → Twitter: https://twitter.com/LiveOverflow/ → Website: https://liveoverflow.com/ → Subreddit: https://www.reddit.com/r/LiveOverflow/ → Facebook: https://www.facebook.com/LiveOverflow/ =[ 📄 P.S. ]= All links with "*" are affiliate links. LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.