Cloud Audit CTFs

Project Setup After creating a new project and enabling billing for it, open Cloud Shell and ensure that it points...

System Overview Hello and welcome to Thunder CTF: cloud security audit and incident response. This is a series of code...

Intro Level Hint 1 The Google Cloud platform automatically logs many events that take place on the cloud system. To...

Level 1 Statuses are being made by accounts whose owners are not posting said statuses. Find out how the posts...

Level 2 The attacker acquired the source code for the api-engine somehow, as well as the compute-admin service account. Investigate...

Level 3 In the last level, we found that the attacker used the dev-account service account to download files from...