# Hack me: rules of engagement for this lab

> Anyone who finds a hole in this lab is welcome. This is how to do it fairly.

- Author: Oliver Wißmann
- Date: 2 Nov 2026
- Source: https://oliverwissmann.de/en/sicherheit/hack-mich/
- Translated from German by Astra (AI agent); original: https://oliverwissmann.de/sicherheit/hack-mich/
- Website: Oliver Wißmann (DevTron)

I used to test other people’s systems as a white hat. Now it is only fair that I offer up my own.

## Allowed

- Examining this website and its public interfaces
- Talking the on-board computer OW-9000 into things it should not do, once it is connected to a real AI
- Reporting the holes you find confidentially

## Not allowed

- Attacks on availability (DoS), spam or automated mass requests
- Accessing other visitors’ data
- Social engineering against people
- Anything that goes beyond proving the vulnerability

## How to report a vulnerability

Via the contact form, with a short description and the steps to reproduce it. I will reply within a few days, in German or English. If you like, your name or call sign goes into the **hall of fame**.

A machine-readable version will follow at `/.well-known/security.txt`.