Identifier / Programs / Linux and Unix
gcloud
The official CLI tool for Google Cloud Platform. Some subcommands such as app, init, etc. have their own usage documentation. tldr-pages
GTFOBins inherit 1 documented command
How gcloud is abused
inherit
help
Each abuse is GTFOBins's category and the options and words it uses; the full write-up is on GTFOBins's page for gcloud.
1 documented command
inherit unprivileged, with sudo, as SUID
gcloud helpThe command the identifier reads trips no Sigma process-creation rule. This command is from GTFOBins, at commit acd524623f9c of 2026-05-27, under the GPL-3.0, with no warranty. Changed: Markdown is shown formatted. The source is in lolbas-gtfobins-commands.json.gz, and the full entry is on GTFOBins’s page for gcloud. The identifier reads the line that runs gcloud.
Everyday use
List all properties in one's active configuration
gcloud config listIdentifyLog in to a Google account
gcloud auth loginIdentifySet the active project
gcloud config set project project_nameIdentifyNone of the 3 examples the identifier reads matches GTFOBins abuse or trips a Sigma process-creation rule.