Offensive GCP Operations
And Tactics Certification
(OGOTC) - On-Demand
Offensive GCP Operations and Tactics Certification (OGOTC)
is a self-paced course that trains security professionals to identify and exploit real-world vulnerabilities in Google Cloud Platform (GCP). Through hands-on labs, you’ll learn how attackers operate so you can stop them before they strike.
What you’ll learn:
- How attackers target GCP infrastructure
- GCP environment enumeration
- Exploiting misconfigurations
- Cloud privilege escalation techniques
- Data exfiltration and lateral movement
- Credential and secret discovery
- Advanced privilege-hunting
- Securing cloud-native services
- Offensive mindset for stronger GCP defense
Finish the course ready to think like an attacker and defend like a pro.
Here's a sneak peek of your training experience
Achieving Success in the OGOTC On-Demand
- Know The GCP Resource Model - Understand projects, resources (VMs, storage, serverless), service accounts, and how permissions map to those resources.
- Privilege escalation paths - Study common escalation techniques in GCP (misconfigured IAM roles, overprivileged service accounts, metadata/instance exposures) and how to harden them.
- Abuse and exfiltration of cloud resources - Practice identifying exposed data, abusing storage/compute for staging/exfiltration, and mitigating data leakage.
- Command & Control (C2) in cloud contexts - Learn how attackers can use cloud services (e.g., messaging, storage, serverless endpoints) for resilient C2 and how to spot such channels.
- Hands-on scenarios - Apply concepts in lab exercises that simulate attacker TTPs and defensive countermeasures across multiple services.
- Think Like an Attacker - Understand how misconfigurations at the Organization level can lead to widespread compromise and how to prevent it.
Flexible Learning Format
- Self-Paced Learning: Take as long as you need to complete the course materials and labs. There are no deadlines.
- Hands-On Lab Experience: Set up and deploy your own GCP infrastructure to simulate real-world red team operations.
- Unlimited Lab Access: Enjoy continuous access to your labs without expiration, allowing you to refine your skills indefinitely.
- Self-Directed Support: Use detailed documentation, video walkthroughs, and comprehensive materials to guide yourself through the labs.
What Is Included
When you enroll in the Offensive GCP Operations And Tactics Certification (OGOTC) – On-Demand, you receive:
Access instructional videos created by cybersecurity experts, guiding you through each aspect of the course.
Gain access to step-by-step walkthroughs of the labs, allowing you to follow along at your own pace.
Use our custom portal to easily build and manage your lab environments without any technical issues.
Enjoy continuous access to your labs without expiration, allowing you to refine your skills indefinitely.
Receive comprehensive course materials, including code snippets, custom scripts, and a detailed lab manual.
Student Requirements
To enroll in the OGOTC On-Demand, students should meet the following requirements:
Basic Cloud Knowledge
Understanding of cloud technology and GCP fundamentals.
Familiarity with Scripting
Basic knowledge of GCloud CLI, Python.
GCP Account
GCP Account with Billing Account Attached and a Project.
Hardware Requirements
A laptop with at least 8GB of RAM and access to a stable internet connection.
Willingness to Learn
A strong motivation to engage with self-directed materials and perform hands-on exercises.
Cost and Discounts
The Offensive GCP Operations and Tactics Certification (OGOTC) – On-Demand is priced at $700. This fee includes access to expert-created instructional materials, unlimited access to self-managed labs, and one exam voucher.
Additional Costs
The OGOTC On-Demand course is designed to be all-inclusive, but students should be aware of a few potential external costs related to lab access and certification preparation:
- Cloud Usage Fees: All labs involve interactions with services in GCP. While most exercises are lightweight, students are responsible for any charges incurred by their cloud provider accounts. It's recommended to monitor usage and shut down unused resources after completing each lab.
- Platform Account Requirements: You will need active accounts with GCP. Mostly the services offer's free tiers, but exceeding those limits—especially on cloud platforms may result in small usage charges.
- Exam Retake Fee (If Needed): Your enrollment includes one exam voucher. If you do not pass on your first attempt, a retake fee between $50–$100 may apply to cover the cost of lab access and grading.
- Local Environment Setup: You may need to install and configure tools such as GCloud CLI, Python etc. These are free to use, but configuration and compatibility may vary by operating system.
Discounts Available
We offer a 20% discount to the following groups:
- Veterans and Active Military Personnel: Honoring those who have served or are currently serving.
- Students: Supporting the next generation of cybersecurity professionals.
- Educators: Recognizing the vital role of teachers in fostering cybersecurity knowledge.
- First Responders: Acknowledging the efforts of those who serve on the front lines in emergencies.
To take advantage of the discount, please email training-team@whiteknightlabs.com with proof of eligibility, and we’ll provide you with a custom discount code.
Register Now to take advantage of our special pricing and begin mastering Offensive GCP Operations!
Offensive GCP Operation and Tactics Certification (OGOTC)
Introduction
Course Approach
Course Support
Course Requirements
Module 1: Introduction to Offensive GCP
- Overview of GCP architecture and key services
- Understanding GCP Identify and Access Management (IAM)
- Security model: API’s, service accounts and organization policy
- Overview of Google Cloud Services
- Gcloud CLI Installation (Windows/Linux)
Module 2: Enumeration
- Unauthenticated permissions
- Authenticated Enumeration
Module 3: Initial Access
Module 4: Post-Exploitation Technique
- Data Exfiltration
- Persistence techniques
Module 5: Lateral Movement Techniques in GCP
- Leveraging IAM role misconfiguration and lateral movement
- Privilege abuse with over permissive roles
Module 6: Hacking Kubernetes
- Intro to Kubernetes and its architecture
- Understanding basic components of K8s
- Compromising K8 pod
- Creating Kubernetes Pods
- Basic Network Configuration
- Abusing Kubernetes (K8s) Roles in GKE
- Jumping from Pod to Pod using Service Account Tokens of a Compromised Pod
Module 7: Privilege Escalation and GCP Abuse
- Privilege Escalation Techniques
- IAM Misconfiguration and Service Account
- Exploiting Over-Permissive Service Accounts via Cloud Functions
- Privilege Escalation via Service Account Impersonation (signBlob Abuse in GCP)
- Undocumented Api
- Abusing Compute Engine for escalation
- AI Privilege Escalation
- Overview of ML. Engineer on Steroids
- AI Platform Service Agent on Steroids
- Agent Privilege Escalation
- Cloud API Gateway Service Agent
- Apigee Service Agent
- BigQuery Continuous Query Service Agent
Course Content Overview:
The OGOTC On-Demand covers the following key areas:
- GCP architecture & core services: projects, service account , networking, and resource model.
- Identity & Access Management (IAM): Roles, policies, service accounts, and permission models.
- Gcloud CLI & tooling: Installing and using gcloud for discovery, exploitation, and remediation.
- Enumeration: Unauthenticated and authenticated discovery techniques to map assets, roles, and permissions.
- Initial access vectors: Common entry points into GCP environments and how attackers gain footholds.
- Post-exploitation: Data exfiltration techniques, persistence methods, and cleanup considerations.
- Lateral movement in GCP: Abusing IAM misconfigurations, over-permissive roles, and delegation chains.
- Kubernetes (GKE) attacks: K8s architecture, pod compromise, service account token abuse, and pod-to-pod pivoting.
- Privilege escalation: Abusing service accounts, service agents, Compute Engine, Cloud Functions, and undocumented APIs.
- Service-agent & platform abuse: Escalation via API/agent service accounts (API Gateway, Apigee, BigQuery agents, AI/ML agents).
- AI/ML specific attack surfaces: How AI platform/service agents can be abused for privilege escalation.
- Defensive controls & mitigation: Hardening IAM, least privilege, org policy, detection, and remediation best practices.
Register Now for the On-Demand Training
Start at your own pace and take as long as you need to complete the course and labs. Secure your seat now and receive additional details by email once you complete the registration.
