TencentGoat: An Intentionally Vulnerable Tencent Cloud Environment

DevSecOps engineer Muhammad Yuga Nugraha introduces TencentGoat, an open-source, intentionally vulnerable playground designed to teach practical attack and defense techniques across Tencent Cloud environments [00:20]. Nugraha maps Tencent Cloud services to equivalent architectures in AWS and GCP, contrasting Cloud Virtual Machine (CVM), Cloud Object Storage (COS), and Cloud Access Management (CAM) with EC2, S3, and IAM [07:27].

The session walks through realistic misconfigurations and attack scenarios within the vulnerable environment, demonstrating how Server-Side Request Forgery (SSRF) vulnerabilities in hosted web applications can be exploited to query the internal CVM Instance Metadata Service (IMDS) and extract temporary CAM credentials [11:05]. Nugraha compares Tencent's metadata architecture with AWS IMDSv2 token-based protections [14:53] and demonstrates how harvested service role credentials can be leveraged to escalate privileges across the tenant environment [18:35], providing remediation recommendations for cloud security teams.

(AI summary — Gemini Flash)