// Rules

Last updated: April 29, 2026

Rules of Engagement

  • No automated scanners (Dirbuster, SQLmap, Nmap scripts, etc).
  • No DDoS, brute-force flooding, or infrastructure disruption.
  • Do not attack the CTF platform itself or its hosting services.
  • No sharing flags or solutions with other teams.
  • Each team must solve challenges independently.
  • No exploitation of unintended vulnerabilities in the platform.
  • Stay within the scope of provided targets only.
  • Respect other players and maintain fair play.
  • Organizers’ decisions are final.