[ChikkaChiChi]

I'd imagine if you were to gain access to the Google internal network, now you have a list of machines that are more than likely running a common software platform you can apply a list of known exploits against. Directory servers also may have elevated privileges or trust relationships that can be spoofed.