The rules of play

By creating an account or playing on CTF Platform you agree to these rules. The sign-up form and the platform show a short summary of them; this page is the full version. If your instructor or event sets extra rules, those apply too.

1. Attack only the challenge targets

Attack only the challenge machines and services the platform gives you, within the challenge you are playing. The platform itself (this website, its accounts, servers and VPN), other players, and any system outside a challenge are off limits.

2. No flag sharing

Do not share flags, solutions or step-by-step walkthroughs with other players while a challenge or event is running, unless your instructor says a task is a group task. The platform checks for signs of shared flags.

3. No automated attacks on the platform

No brute-forcing flags, guessing passwords, flooding the site or other automated attacks against the platform. Request limits are enforced, and repeated attempts are refused for a while.

4. Report platform vulnerabilities, do not use them

If you find a security problem in the platform itself (not in a challenge, which is meant to be broken), report it privately to security@qvanguard.org and do not exploit it. See responsible disclosure.

5. One account per person

You are responsible for everything done with your account. Keep your password to yourself and use one account only.

6. Your data

What the platform records about you, who can see it and how to ask for a correction or deletion is described in the Privacy Policy. Your display name, points and rank are public on the scoreboard.

What happens if a rule is broken

Administrators can suspend an account. A suspended account is refused on every page and action of the platform, its VPN access is disconnected and its running challenges are stopped. Points gained by breaking these rules can be removed. For a class, your instructor decides any further consequences.

Changes

If these rules change, the date at the top changes with them, and the short summary on the platform is updated to match.