Welcome to Damn Vulnerable Web

Rules

!
Important
Fair Play Policy
Any form of cheating, exploitation of vulnerabilities in the platform, or sharing of flags will result in immediate disqualification. Play fair and have fun!
01
Flag Format
All flags follow the format: rewrite{...}
Submit flags exactly as you find them, including the wrapper.
02
No Flag Sharing
Do not share flags, hints, or solutions with other participants. Each player must solve challenges independently.
03
Do Not Attack Infrastructure
Attacking the scoring system, other participants, or any infrastructure not explicitly designated as a challenge target is strictly prohibited.
  • No DoS/DDoS attacks
  • No brute-forcing the scoreboard
  • No scanning other participants
04
One Account Per Person
Each participant may only use one account. Multiple accounts will result in disqualification of all associated accounts.
05
Automated Tools
Using automated tools is allowed for solving challenges, but not for attacking the platform. Rate limiting may be enforced.
06
Admin Decisions
The administrators' decisions are final. If you believe there is an issue with a challenge, please contact an admin through the official channels.

Need Help?

If you have any questions about the rules or encounter any issues, feel free to reach out to our team.

Contact Admin