Challenge vs Lab
Challenges are standalone tasks: open the challenge page, solve it, then submit the flag.
Labs are instance-based: start your instance, connect through VPN, solve inside the environment, and submit the flag.
- Challenge: no instance required.
- Lab: active instance + VPN required.
Points
Each item has base points and a difficulty tier. Typical tiers are Easy / Medium / Hard / Insane.
Some events may use dynamic scoring where points can vary based on total solves.
- Easy: lower base points.
- Hard/Insane: higher base points.
- Scoreboard totals are cumulative across solved items.
Hints
Hints are optional and cost points. Penalties remain applied even if you solve later.
Use hints strategically when blocked, not as first action.
- Hint 1: -10 points
- Hint 2: -20 points
- Penalty is permanent for that item.
Flag Rules
Submit flags exactly as displayed by the challenge or lab.
Flags are case-sensitive. Extra spaces or altered characters will fail validation.
- Format: FLAG{...}
- No leading/trailing whitespace.
- Copy exactly from source output.
FLAG{example_redacted_flag}Attempts & Rate Limits
Do not brute force submissions. Rapid incorrect attempts may trigger rate limits or temporary cooldown.
If you hit repeated failures, validate format, encoding, and challenge context before retrying.
Solved Status
Points are awarded once per user per item.
Resubmitting a solved flag does not grant extra points.
Leaderboard
Leaderboard ranking uses total points earned.
Tie-breaker is earliest solve timestamp for the last score-changing submission.
Fair Play
Compete independently and respect platform boundaries.
Attack only your assigned targets and explicitly in-scope content.
- No flag sharing.
- No account sharing.
- No DoS or abuse against platform infrastructure.
- No scanning, pivoting, or interfering with other users.
- Report vulnerabilities responsibly to staff.
Writeups
Writeups are allowed after an event ends.
Do not publish live event solutions or private flags while the event is active.
Academic Integrity
Learning is the priority: document your process and cite external references when used.
During graded activities, do not copy/paste complete solutions from others.