Take it like a gift
GCPBucketBrute
Enumerate Google Storage buckets, check the access and if they can be privilege escalated.
Pentest Mapper
Burp Suite extension for application pentest to write test cases and map flows and vulnerabilities.