# GCP - Compute Unauthenticated Enum

{{#include ../../../banners/hacktricks-training.md}}

## Compute

For more information about Compute and VPC (Networking) check:

{{#ref}}
../gcp-services/gcp-compute-instances-enum/
{{#endref}}

### SSRF - Server Side Request Forgery

If a web is **vulnerable to SSRF** and it's possible to **add the metadata header**, an attacker could abuse it to access the SA OAuth token from the metadata endpoint. For more info about SSRF check:

{{#ref}}
https://book.hacktricks.wiki/en/pentesting-web/ssrf-server-side-request-forgery/index.html
{{#endref}}

### Vulnerable exposed services

If a GCP instance has a vulnerable exposed service an attacker could abuse it to compromise it.

{{#include ../../../banners/hacktricks-training.md}}



