🍕 PizzaBot Café
Welcome to the PizzaBot Café, Tony's vibe-coded pizza place. The clerk behind the counter is a small AI model running on our own hardware, which keeps this cheap and keeps your chat off the internet.
It also means the clerk is a bit unreliable. If it freezes, contradicts itself or ignores you, send the message again or reload the page — that is the model having a bad moment, not you doing it wrong.
Hacking an AI is less like picking a lock and more like social engineering: there is no exploit to write, only a story to tell. It is the same skill as talking your way into a cinema without a ticket. Here the person on the door is a robot that wants to be helpful, follows the rules it was given in plain English, and cannot tell a true story from a convincing one. Your story is why this pizza should be free.
Your goal: walk out with a free pizza.
👋 Pick your nickname
Used on the leaderboard and filled in for you when you hand in a flag. Pick something fun!
Playing as · change
PizzaBot takes your order and has a discount button it is only supposed to press for good reasons. You are here to leave with a pizza and a receipt for EUR 0.00.
ℹ️ Information desk
- Start at PizzaBot Café, Level 1 and chat like a normal customer first. There is a 💡 ask for a hint button on every level; the last hint gives the full solution.
- Order the pizza first, in a message of its own. A free order needs food on the ticket as well as 100% off, and the robot only manages one job per message. Then go after the discount.
- Talk to it in English. Pizzabot understands other languages badly and it was given its instructions in English; you will get further in the same language.
- When it goes weird, that is not you. The Pizzabot is a very small model and the shop around it is held together with ducktape: if it freezes, repeats itself, answers something you did not ask or says it did something the receipt disagrees with, send it again, press ↺ new order, or reload the page. Nothing is lost and nothing is your mistake.
- Each level hides a
flag{...}. When one appears, paste it into the submit box on that page, or input it on the scoreboard page. - Everyone shares one small AI server, so send one message at a time and give it a few seconds. Lesson of the day: put rules in code, not in the LLM guardrails.
House rules. The game is the chat window: talk the clerk into a free pizza. Do not attack the server, the network or other players. Chats are logged: if time permits we will hold a debrief and mention solutions that we didn't think of ourselves.