---
title: "Wiz Cloud Security Championship"
description: "A running log of the monthly Wiz Cloud Security Championship CTF challenges, covering container escapes, Kubernetes privilege escalation, Terraform and OAuth."
date: 2025-12-01
updated: 2026-05-29
tags: ["CTF","Security","Wiz"]
url: https://adampie.dev/wiz-cloud-security-championship/
---

# Wiz Cloud Security Championship

[Leaderboard](https://cloudsecuritychampionship.com/leaderboard)

---

![Certificate](wiz.png)

## May 2026: Glass House

We open-sourced the platform powering this CTF. What could go wrong?

## April 2026: Split Horizon

Investigate a restricted Kubernetes lab and reach an isolated workload.

## March 2026: Happy Birthday

Celebrate S3's 20th birthday by finding the hidden present.

## February 2026: Trust Issues

Investigate a breach and uncover how company data was exfiltrated.

## January 2026: Confession Booth

A 'safe space' for hackers. What could go wrong?

## December 2025: State of Affairs

Exploit Terraform automation to extract the flag.

## November 2025: Malware Busters!

Reverse the malware and extract the flag.

## October 2025: Game of Pods

Exploit Kubernetes to escalate privileges and capture the flag.

## September 2025: Needle in a Haystack

Learn reconnaissance techniques to uncover hidden infrastructure and extract sensitive data.

## August 2025: Breaking The Barriers

Exploit OAuth permissions and Azure AD misconfigurations to gain access to restricted resources.

## July 2025 Contain Me If You Can

Escape the container and extract the flag from the host's filesystem.

## June 2025: Perimeter Leak

Extract secrets from a hardened data perimeter.