The Agent Skills Directory

[PRIVILEGE_ESCALATION]: The skill documents how to escalate privileges from a GCP Service Account to a Google Workspace Super Admin by abusing Domain-Wide Delegation (DWD). It provides a step-by-step decision tree for transitioning between these platforms.
[DATA_EXFILTRATION]: Provides specific commands and Python scripts designed to search for and extract sensitive information like passwords, API keys, and credentials from Gmail and Google Drive. It also includes methods for downloading attachments and sending emails from the compromised account.
[PERSISTENCE]: Details multiple techniques to maintain unauthorized access, including creating backdoor administrator accounts, configuring cross-organization DWD backdoors, and setting up Gmail filters to automatically delete security alerts to hide activity from the user.
[COMMAND_EXECUTION]: Contains numerous high-risk shell commands using the gcloud CLI and curl for environment manipulation, credential generation (SA keys), and credential hijacking via SDK modification.
[EXTERNAL_DOWNLOADS]: Recommends the acquisition and use of several third-party exploitation tools and frameworks from external repositories to automate the discovery and abuse of DWD configurations.

gcp-workspace-pivot