CTF Rules
العربيةLast updated:
1. Teams and format
- Events run on ctf.securityexile.com. Play solo or in a team of up to 4.
- One account per person, and one team per person per event.
- Scoring is dynamic: a challenge is worth less the more teams solve it. Ties go to the team that reached the score first.
- The scoreboard freezes for the final hour of each event.
2. Flags
Flags look like SE{...} unless a challenge says otherwise. Submit the whole flag, including SE{ and }. Wrong submissions are rate-limited, so brute-forcing the flag box won't work.
3. Fair play
- Don't share flags, solutions or hints with anyone outside your team while an event is running.
- Don't work with other teams or use more than one account.
- Don't interfere with other players or their challenge instances.
- Search engines, documentation, tools and AI assistants are allowed. Asking another person to solve a challenge for you is not.
4. What's in scope
Only the challenge targets themselves. The CTF platform, the scoreboard, this website, Discord and the hosting infrastructure are out of scope. Denial of service against anything is forbidden.
Found a bug in the platform instead of a challenge? Report it privately through /security. Don't use it to gain points.
5. Broken challenges and help
If a challenge seems broken or a service is down, open a ticket in the Discord #ctf-support channel. Admins will confirm the fix in #announcements. Admins don't give hints beyond the ones published on the platform.
6. Writeups
Publish writeups only after the event ends. Writeups you post on Security Exile and link to the event stay hidden until it's over. The best community writeups are featured, with credit.
7. Disqualification
Breaking these rules can lead to points being removed, disqualification from the event, or a ban under the Terms of Use. Admins' decisions on scoring are final.