Low Orbit Security

6. This could be you running gubble....

5. With Gubble you can easily identify these threats (or opportunities if you're on the offensive security side of things)

4. In this example, anyone in the organization can send messages from the security group. This can be used for internal phishing.

If a threat actor can post as security@<yourorganization>.com, they can send out extremely successful internal phishing emails

3. Or how about finding a group called CLOUD_ADMINS that anyone in your organization can join?

Who knows what level of access being in this group would give an attacker.

2. Gubble finds overly permissive group like this HR one that exposes highly sensitive information.

1. Are you sure your your sensitive Groups are locked down?

In this example everyone in the domain can view the conversations of the HR Group.

GitHub - LowOrbitSecurity/gubble: gubble is a tool designed to audit Google Workspace group settings. It analyzes settings such as who can join, view membership, post messages, view conversations, and... gubble is a tool designed to audit Google Workspace group settings. It analyzes settings such as who can join, view membership, post messages, view conversations, and more to help identify potentia...

Happy new year! Gubble is out now!

Gubble is a tool that queries the Workspace API to analyze Group permissions to identify potential security risks, allowing both offensive and defensive teams to programmatically identify risky permissions.

github.com/LowOrbitSecu...

Gubble is coming out this week. Here is a sneak peek of some tools I created to help test it. What could this be for 🤔

Soon.

# ---- LOW ORBIT SECURITY ----
# <<INCOMING TRANSMISSION>>

# Objectives: Tailored Security Solutions,
# Research, Tooling
# Date: <Unknown>

# ---- :WQ ----