Code of conduct

Rules of engagement

Every competitor accepts these rules at registration. Instructors may update them during the event; changes are posted as announcements.

1. Spirit of the competition

  • This is an educational event. Learning and sportsmanship come before points.
  • Ask instructors for help when you are stuck — hints exist for a reason.

2. Scope

  • Only attack the systems, files, and endpoints explicitly provided in a challenge.
  • Attacking the scoring platform, other competitors' machines, or campus infrastructure is prohibited and disqualifying.
  • Denial-of-service, brute forcing the flag submission endpoint, and automated scanning of the platform are prohibited.

3. Flag handling

  • Flags are personal to your team. Sharing flags or solutions with other teams during the event is disqualifying.
  • Flag submissions are logged and rate limited. Repeated abusive submission patterns are reviewed by instructors.

4. Teams

  • Compete solo or on a team of up to the configured maximum (default 4).
  • A team scores each challenge once; the first correct submission by any member credits the whole team.
  • Captains may transfer captaincy at any time.

5. Conduct

  • Harassment, discrimination, or abusive language results in immediate removal.
  • Do not publish write-ups or challenge material until the instructor releases them.
  • Instructor decisions on scoring and eligibility are final.