Home
About
Rules
Every operative must abide by these protocols. Violations will result in immediate disqualification or account termination.
Do not share flags, write-ups, or solution methodologies while the CTF is active. Public disclosure of solutions before the competition ends is strictly prohibited.
No DoS/DDoS attacks, port scanning outside designated ranges, or brute-forcing authentication endpoints. Target only the challenges provided.
Skills learned here are for defensive security and authorized testing only. Any malicious use of techniques outside this platform is strictly forbidden.
Each operative must have their own unique account. Sharing credentials or collaborating on flag submissions is considered cheating.
All flags follow the format GX{...}.
Submit exactly as found — case-sensitive. Multiple submissions may incur cooldown penalties.
Automated tools (bots, brute-forcers) are prohibited. Use of AI to generate solutions must be disclosed. Be sportsmanlike in Discord/forums.
First minor offense: written warning & score penalty
Second offense: 48-hour ban + rank reset
Severe violations: IP ban & public blacklist
Clarifications on common gray areas
Yes, as long as you understand the code and it doesn't violate infrastructure rules. Blind copy-pasting is discouraged — we encourage learning.
Team registration is available. Individuals cannot share flags across separate accounts. Form a team before the competition starts.
Report immediately to admins via Telegram. Do not exploit it. Responsible disclosures may earn bonus points.
Permitted but must be disclosed in your final write-up. Over-reliance may hinder learning. Automated AI solvers are banned.
By registering, you automatically agree to these rules and enforcement policies.