Lv 16–26
Cloud Highlands
Infrastructure floating above the ground truth — one misconfigured permission from disaster.
Bucket Wisp · Lv 16
Publicly Readable Storage Bucket
Privilege Drifter · Lv 17-18
IAM Self Privilege Escalation
locked
Metadata Wraith · Lv 19-20
Cloud Instance Metadata SSRF
locked
Cage Breaker · Lv 20-21
Container Escape via Exposed Docker Socket
locked
Function Ghost · Lv 22-23
Serverless Command Injection
locked
Pipeline Wyrm · Lv 24-25
Poisoned Pipeline Execution (CI/CD)
locked
BOSS · The Sky Breach · Lv 25-26
Two-phase: Cascading Cloud Privilege Escalation to Mass Exfiltration, then forge the containment rule.
clear all 6 pairs first