Rule 10: No attacks against (or from) the instance

You may not do anything which may impact confidentiality, integrity or availability of Infosec.Exchange services, the infrastructure on which the service relies, the users of the service, or their data.

This may include, but is not limited to:

• Denial of Service attack (DoS)
• Distributed Denial of Service attack (DDoS)
• Attempting to hack/exploit any software or hardware that compromises the service
• Compromise/attempted compromise of any user or admin account/login
• Impersonation of any user or admin
• Posting of malicious links/materials except where clearly identified as such and placed behind a content warning

This rule also encompasses using Infosec.Exchange in any way to impact other servers or people.

Conducting Mastodon vulnerability research/testing against Infosec.Exchange is not permitted.

If you are looking for somewhere to test vulnerabilities of Mastodon, instances exist which are run and maintained for the purpose of providing security researchers with a hunting ground.