Ping of Cloud
Ping of Cloud

Ping of Cloud drops you into an external perimeter assessment against a cloud-hosted diagnostic utility. The target presents a simple reachability interface, but what appears to be an isolated tool is merely the front door to an entire cloud footprint. Your mission is straightforward: find the flaw, gain a foothold, move laterally through the infrastructure, and retrieve the hidden assets.

One entry point. One chained attack. Every stage bridges the gap between traditional application exploitation and offensive cloud tradecraft. There are no shortcuts and no skipping steps, just you, the target, and the clock. Ping of Cloud is the proving ground for security researchers ready to turn a single unvalidated input into a full cloud compromise.

Previous Experience

Players should have hands-on penetration testing skills, including web application exploitation, Linux command-line proficiency, network enumeration, and a working understanding of basic cloud concepts.

Goal of the Competition

/Exploit the exposed web interface to gain initial access to the underlying system.

/Enumerate the local environment and escalate your privileges.

/Pivot deeper into the cloud infrastructure to locate restricted resources.

/Chain the attack vectors stage-by-stage to uncover all hidden flags.

/Reach the deepest layer possible in the shortest time, using the fewest hints.

Rules of Engagement

/Individual Instances: Each participant operates within their own isolated target environment.

/Attacking other players, event platforms, or shared scoring infrastructure is strictly forbidden.

/Scope Definition: All offensive activities must remain strictly confined to the designated target assets. Out-of-scope services or external cloud infrastructure are strictly off-limits.

/No Denial of Service (DoS): High-concurrency brute-forcing, resource flooding, or any action designed to disrupt platform stability will result in immediate disqualification.

/Tooling: You are free to use any standard security tools, custom scripts, and attack frameworks.

/Scoring & Progression: Points are awarded per stage upon submitting the valid flag format. Stage hints are available on-demand but will deduct from that stage’s points.

/Tie-Breaker: Ties are settled by the furthest stage completed, fastest completion time, and lowest hint count.

/Fair Play: Flag sharing, sabotaging environments, or exploiting unintended bugs in the hosting platform is strictly prohibited.

PRIZES

1st place: GL.iNet Flint 3 router + GL.iNet Comet remote KVM

2nd place: GL.iNet Beryl AX travel router + YubiKey 5C NFC

3rd place: TP-Link managed switch + Yubico Security Key C NFC

SPONSORED BY

HACKING VILLAGE

Other Competitions

ClickBait

Overview Back to Contests ClickBait Hosted by Hackout, in partnership with the Romanian Police This year, ..

Target John

Target John is a competition where participants receive several details about a real target and they have to ..

The Honeycomb

Overview Back to Contests The Honeycomb Step into The Honeycomb, the place for cybersecurity built by ..

Sponsors & Partners

They help us make this conference possible.

POWERED BY

Orange Business is a key division of Orange Romania, specializing in providing cutting-edge communication, technology, and digital transformation solutions tailored to businesses of all sizes. With a strong emphasis on innovation, Orange Business offers a wide array of services, including high-speed connectivity, cloud computing, cybersecurity, Internet of Things (IoT), and managed services. Their mission is to support organizations in their digital transformation journey by enhancing operational efficiency, improving customer experience, and maintaining a competitive edge in a rapidly changing digital environment.

Orange Business combines deep technological expertise with a customer-centric approach, ensuring that each solution is customized to meet the specific needs of their clients. Their commitment to innovation and excellence makes them a trusted partner for businesses seeking to thrive in the digital age.

PLATINUM PARTNER

GOLD PARTNERS

SILVER PARTNERS

BRONZE PARTNERS

HACKING VILLAGE PARTNERS

EXHIBITORS

VIP LOUNGE POWERED BY
ORGANIZER
INTERNATIONAL COMMUNITY PARTNERS
MEDIA PARTNERS