1. Acceptable Use
You agree to only attack designated challenge targets provided by the platform. Any attempt to attack
platform infrastructure, other users, or systems outside the challenge scope is strictly prohibited.
2. No Flag Sharing
Sharing flags, solutions, or detailed walkthroughs with other participants during active competitions
is prohibited and may result in permanent account suspension.
3. No Automated Attacks
Automated brute-force attacks against the platform (flag guessing, credential stuffing, DDoS) are
prohibited. Rate limits are enforced and violations will result in temporary or permanent bans.
4. Responsible Disclosure
If you discover a vulnerability in the platform itself (not a challenge), report it responsibly to
the administrators. Do not exploit platform vulnerabilities.
5. Account Responsibility
You are responsible for all activity under your account. Do not share your credentials. One account
per person.
6. Privacy & Data
Your display name, points and rank are public on the scoreboard. What else we record, who can
see it and how to ask for a correction or deletion is in the
Privacy Policy.
This is a summary of the full
Terms and Rules
(last updated 7 November 2026).