Rules of engagement

By using Cybertection Labs you agree to these rules. Breaking them ends your access with no refund.

In scope

• Only the target IPs shown on your dashboard for machines you started.
• Any technique against those machines: scanning, exploitation, privilege escalation, brute force.

Out of scope

• The VPN gateway, the lab API, this website, and any Cybertection or Google Cloud infrastructure.
• Other students, their machines, and their VPN addresses.
• Denial-of-service against anything, including your own machines.
• Anything on the internet. Lab machines have no internet access; don't try to get around that.

Your account

• Your VPN profile is personal. Don't share it or your login.
• Don't publish flags or full walkthroughs for active machines.
• VPN sessions are logged for abuse investigation.

Found a real bug?

If you find a vulnerability in our actual platform rather than a lab machine, report it privately through cybertection.net. Don't exploit it.