CloudFoxable
Set up a vulnerable AWS playground and solve its flag challenges
CloudFoxable creates an intentionally vulnerable AWS environment in your own account using Terraform. You then work through a list of challenges on a hosted scoreboard, each one pointing you at a different misconfiguration to find, and submit the flags you recover.
Free · No login · Server · Intermediate
About CloudFoxable
It trains AWS security assessment and goes well with Bishop Fox's CloudFox tool for mapping attack paths. It suits intermediate players who know basic AWS and the command line.
The code is free and the scoreboard is hosted by Bishop Fox, but the lab runs in your own AWS account, so small costs are possible. Registering on the scoreboard is needed to submit flags.
On Breakpoint since 25 Oct 2026.
Made this game? Claim it →
Tips and discussion
No tips yet. Solved it? Share how, and wrap answers in ||spoilers||.