Bruteforce GCP permissions

Find which permissions a GCP principals has access to (you need to have credentials for it).

Note that if the project doesn't have enabled the service cloudresourcemanager.googleapis.com, it won't be possible to perform this action! So, check that the service is enabled in the project from where you are checking.

python3 bf_my_gcp_perms.py -h
usage: bf_my_gcp_perms.py [-h] (-p PROJECT | -f FOLDER | -o ORGANIZATION) [-v] [-T THREADS]
                          [-s SERVICES] [-S SIZE] (-c CREDENTIALS | -t TOKEN)

Check your permissions over an specific GCP project, folder or organization.

options:
  -h, --help            show this help message and exit
  -p PROJECT, --project PROJECT
                        Name of the project to use (e.g. digital-bonfire-186309)
  -f FOLDER, --folder FOLDER
                        ID of the folder to use (e.g. 433637338589)
  -o ORGANIZATION, --organization ORGANIZATION
                        ID of the organization to use (e.g. 433637338589)
  -v, --verbose         Print the found permissions as they are found
  -T THREADS, --threads THREADS
                        Number of threads to use, be careful with rate limits. Default is 3.
  -s SERVICES, --services SERVICES
                        Comma separated list of GCP service by its api names to check only (e.g.
                        filtering top 10 services: -s iam.,compute.,storage.,container.,bigquery
                        .,cloudfunctions.,pubsub.,sqladmin.,cloudkms.,secretmanager.). Default
                        is all services.
  -S SIZE, --size SIZE  Size of the chunks to divide all the services into. Default is 50.)
  -c CREDENTIALS, --credentials CREDENTIALS
                        Path to credentials.json
  -t TOKEN, --token TOKEN
                        Raw access token

# Check permissions for a project
python3 bf_my_gcp_perms.py -p project-name-1232 -t $(gcloud auth print-access-token)
# Check permissions for a folder
python3 bf_my_gcp_perms.py -f 433637338589 -t $(gcloud auth print-access-token)
# Check permissions for an organization
python3 bf_my_gcp_perms.py -o 433637338589 -t $(gcloud auth print-access-token)

# Using json creds
python3 bf_my_gcp_perms.py -c /tmp/credentials.json -p project-name-1232

# Using raw token
python3 bf_my_gcp_perms.py -t <token> -p project-name-1232

# Using gcloud generated token
python3 bf_my_gcp_perms.py -v -p project-name-1232 -t $(gcloud auth print-access-token)

# Checking permissions only in the top10 services
python3 bf_my_gcp_perms.py -v -p project-name-1232 -t $(gcloud auth print-access-token) -s "iam.,compute.,storage.,container.,bigquery.,cloudfunctions.,pubsub.,sqladmin.,cloudkms.,secretmanager."