exploitroom — legal
$ cat terms-of-service.md
Legal / Acceptable Use

Terms of Service

Last updated: August 2026
Terms of Service Privacy Policy
01

Acceptance of Terms

By creating an account, or by accessing any challenge, lab, attack machine, or lesson on ExploitRoom, you agree to be bound by these Terms of Service and the Privacy Policy. If you do not agree, do not create an account or use the platform.

02

What ExploitRoom Is

ExploitRoom is a cybersecurity training platform. It provides CTF-style challenges, sandboxed attack machines, Academy lessons, and a career/internship track for the sole purpose of teaching and practicing authorized, legal offensive and defensive security skills.

03

Authorized Use Only

Everything you learn or practice here — techniques, tools, payloads, exploit chains — exists strictly for legal, authorized security research and education inside the environments we provide. You may never use anything learned on this platform to access, attack, or compromise a system you do not own or do not have explicit written authorization to test. ExploitRoom does not condone, support, endorse, or provide legal cover for using this platform's content to commit a crime.

You are solely responsible for how you apply the knowledge gained here outside of ExploitRoom's own sandboxed environments.

04

Your Account

  • One account per person. Sharing credentials or accounts is not allowed.
  • You are responsible for keeping your credentials secure and for all activity that happens under your account.
  • You must provide accurate registration information.
05

Content Ownership & No Redistribution

Challenges, challenge files and flags, writeups, attack-machine builds, and Academy lessons (including video) are proprietary and provided to you for personal learning only. You may not copy, mirror, repost, resell, or otherwise redistribute this content — in full or in part — to any other platform, site, forum, Discord server, repository, or paste service.

06

Enforcement

If an account is found responsible for leaking ExploitRoom content — challenge files, flags, writeups, lesson material, or attack-machine access — to another platform, that account will be banned from ExploitRoom for a minimum of three (3) years. Repeat offenses, or leaks combined with using platform content to facilitate unauthorized access to real-world systems, may result in a permanent ban and referral to the relevant authorities where applicable.
07

Prohibited Conduct

  • Sharing, farming, or trading flags outside of legitimate solving.
  • Attacking ExploitRoom's own infrastructure outside of a sanctioned challenge scope.
  • Harassment, impersonation, or abusive behavior toward other users or staff.
  • Using anything learned here to plan, facilitate, or carry out unauthorized access to third-party systems.
08

Suspension & Termination

ExploitRoom may suspend or terminate any account that violates these Terms, at its discretion, with or without notice.

09

Disclaimer

The platform and its content are provided "as is," for educational purposes, without warranty of any kind. ExploitRoom is not liable for how you use knowledge gained here outside of our sandboxed environments.

10

Changes & Contact

We may update these Terms from time to time; continued use of ExploitRoom after a change means you accept the update. Questions? Reach out to our support team.