BrokenAzure.Cloud
Find flags hidden in a deliberately misconfigured Azure environment
BrokenAzure.Cloud is a capture-the-flag game set in a fictional company's Azure setup. You start from a public web app and explore the badly configured Azure resources behind it, collecting flags as you go deeper.
Free · No login · Browser · Beginner
About BrokenAzure.Cloud
It trains awareness of common Azure misconfigurations, and each broken feature is explained along with how to prevent it. It suits beginners to cloud security and Azure administrators who want to see their setup from an attacker's side.
The challenges are hosted online for free, and a hint page helps when you get stuck. The project is open source and can also be deployed into your own Azure account with Terraform.
Made this game? Claim it →
Tips and discussion
No tips yet. Solved it? Share how, and wrap answers in ||spoilers||.