How does flag validation work? Where do I submit?

[kOaDT]

Use the flag checker — the floating button in the bottom corner of every page in the lab. Paste the flag, hit verify.

Format is always OSS{...}, and the string is checked against the database as an exact match, so trim any whitespace or trailing quote you dragged along with it.

Two things worth knowing:

• No account is needed to submit. Validation happens on the instance, not against a user. Some challenges do require you to be logged in to reach the vulnerability — but the flag itself validates either way.
• Progress is stored per instance, not per player. Everyone hitting the same running lab shares the same found-flag list. If you are running a session for a group and want separate progress, give each person their own instance.