CloudBreach Labs are hosted on Public Cloud Infrastructure and as such are governed by Microsoft’s and AWS Penetration Testing Rules of Engagement.

DOs

  • Use Brute Forcing in Specific Challenges
  • Discuss with other players on Discord
  • Ask For Help or Hints from the CB Admins
  • Have Fun!

DONTs

  • Perform DoS attacks against the Cloud infrastructure.
  • Deploy malware on any of the virtual machines.
  • Perform DoS attacks on the CTF infrastructure.
  • Scanning or testing assets belonging to any other Microsoft Cloud customers.
  • Gaining access to any data that is not wholly your own.
  • Performing automated testing of services that generates significant amounts of traffic.
  • Fuzzing, port scanning, or run vulnerability assessment tools.
  • Attempt to abuse lab resources/internet or any other service will result in immediate suspension of your service without refund