CSEMA Cloud Security Challenges

• 01_public_bucket
• 02_forgotten_backup_bucket
• 03_bucket_enumeration
• 04_object_acl_mistake
• 05_signed_url_forever
• 06_cloud_metadata_101
• 07_metadata_ssrf
• 08_imds_legacy
• 09_snapshot_exposure
• 10_public_cloud_config
• 11_storage_version_ghost
• 12_bucket_policy_maze
• 13_cross_tenant_storage
• 14_object_tag_privilege
• 15_cloud_storage_incident
• 16_iam_rookie
• 17_wildcard_permission
• 18_role_assumption
• 19_confused_deputy
• 20_service_account_token
• 21_forgotten_api_token
• 22_secrets_manager_rookie
• 23_environment_secret
• 24_role_chain
• 25_iam_condition_bypass
• 26_temporary_credential_trail
• 27_cross_account_trust
• 28_secret_version_history
• 29_cloud_admin_escalation
• 30_iam_labyrinth
• 31_function_environment
• 32_public_function
• 33_function_role_abuse
• 34_event_injection
• 35_serverless_ssrf
• 36_function_to_function_trust
• 37_secret_in_deployment
• 38_old_function_version
• 39_serverless_authorization
• 40_serverless_breach
• 41_container_environment
• 42_docker_socket_simulator
• 43_container_registry_leak
• 44_kubernetes_api_rookie
• 45_k8s_service_account_token
• 46_rbac_wildcard
• 47_namespace_escape_logic
• 48_kubernetes_secrets
• 49_privileged_pod_simulator
• 50_cluster_takeover_simulator
• 51_ci_environment_leak
• 52_build_log_secret
• 53_artifact_registry
• 54_pipeline_token
• 55_deployment_role
• 56_poisoned_build_config
• 57_gitops_secret
• 58_container_image_history
• 59_dependency_pipeline
• 60_cicd_compromise
• 61_cloud_audit_investigator
• 62_multi_tenant_saas_cloud
• 63_cloud_network_maze
• 64_secrets_everywhere
• 65_cloud_ransomware_simulator
• 66_startup_cloud_breach
• 67_fintech_cloud
• 68_operation_cloud_shadow
• 69_operation_skyfall
• 70_operation_cloud_zero