Thunder CTF
Deploy vulnerable Google Cloud levels and find each hidden secret
Thunder CTF is a set of six Google Cloud levels. You deploy each level into your own GCP project from Cloud Shell, then find the secret number hidden somewhere in the misconfigured resources. Hints become more specific the more you ask for.
Free · No login · Server · Intermediate
About Thunder CTF
It trains GCP identity, storage, Compute Engine and Cloud Functions security. It suits intermediate players who are comfortable in a terminal and want to practise cloud security without a hosted platform.
It is free and open source, but you need a GCP project with billing enabled. The authors say it mostly fits in the free tier and suggest destroying each level when you finish.
On Breakpoint since 25 Oct 2026.
Made this game? Claim it →
Tips and discussion
No tips yet. Solved it? Share how, and wrap answers in ||spoilers||.