Google Summer of Code
GCP Scanner
About the Organization
Security scanning tool for Google Cloud
Primary Technologies & Languages
pythongoogle cloud
Technical Topics & Focus Areas
securityautomationscanninggoogle cloud
Participation Years
Completed Projects Distribution
Annual Completed Projects History
GCP ScannerHover over bars to view completed counts
4
3
2
1
0
2023
Projects3
Years Active1
Stackpython
TierTier 1
Past Projects
Showing 3 of 3 projects. Click any project card for scope, mentors, and proposal studio.
Results Visualization For GCP Scanner
intermediateMentors: Student: Yahia Zakaria
This project aims to implement a web single-page application to visualize the output of the GCP scanner tool. The app should make it easier for users to quickly identify all resources their credentials have access to and allow the user to filter and search through these resources. The app should also provide the user with different visualizations for other information extracted from the GCP scanner.
Expanding Support for GCP Resources with Modularized Crawler
intermediateMentors: Student: Sudipto Baral
GCP Scanner is a crucial tool for security engineers, providing insights into the access levels of various GCloud credentials. This project proposal focuses on enhancing the GCP Scanner by supporting scanning for additional GCP resources such as Cloud Run, Cloud DNS, Datastore, etc. Additionally, a plan for refactoring the crawler and unit tests for better maintainability and scalability is proposed. It also includes my relevant experience, contributions, and qualifications to maintain and improve the GCP Scanner.
Code Refactoring & Parallelization
intermediateMentors: Student: peb
Currently, GCP Scanner does not support the parallel enumeration of GCP resources and parallel scanning of GCP targets. This project is aimed to address this shortcoming. Also, GCP Scanner has one giant scanning loop from where it launches GCP resource crawlers. We need to split each crawler into individual modules with proper error handling that will improve code readability and quality. We can leverage python classes for the state of execution control, config parsing, and enabling/disabling certain functionality in the scanner.