← Back to the challenge

Terms of participation

This is a free challenge of technical skill, not a random drawing or sweepstakes. No purchase or payment is required. Only participate if it is legal for you to do so.

The wallet

First person to get the wallet wins. Someone else may empty it before you do, even if you find the key. The displayed dollar value is approximate; bitcoin prices and fees change. There is no guaranteed payout or replacement of funds already claimed. Do not send your own money to the wallet.

Play within the challenge

Test the web application and run print-flag inside the PHP container. Do not attack the host, SSH, Docker, Nginx, other people, or third-party services. No container escapes, denial of service, resource exhaustion, persistence, or sabotage.

Use at your own risk

This server is intentionally insecure. Use an isolated testing environment and do not submit passwords, private keys, or personal information.

Privacy

All traffic is logged. This is a known vulnerable machine, so we cannot guarantee privacy. Other attackers may access or monitor activity and data beyond our control. Do not submit anything you want to keep private.

The challenge may go offline, change, or end at any time. Uptime, solvability, saved progress, and recovery are not guaranteed.

To the extent the law allows, we provide this challenge as is and accept no liability for losses or damage from taking part.

By participating, you agree to these rules.