Welcome to the EverSec CTF. These rules exist to keep the competition fair, the infrastructure stable, and the experience positive for everyone. Participation implies acceptance of all rules below. When in doubt, ask an organizer.
01
Respect the Scope
Only target systems, challenges, and infrastructure explicitly provided as part of the CTF. Do not attack conference networks, attendee devices, or external services.
02
No Denial of Service (DoS)
Intentionally disrupting services, flooding infrastructure, or degrading availability for other participants is prohibited.
03
No Attacking the Platform
Do not exploit vulnerabilities in the scoreboard, registration system, or hosting platform unless explicitly stated as part of a challenge.
04
Play Fair
Collaboration is allowed unless otherwise specified, but sharing flags, solutions, or direct answers with other teams is not permitted.
05
No Brute-Force Abuse
Automated guessing or brute-force attacks that negatively impact infrastructure or bypass challenge intent are not allowed unless clearly required by the challenge.
06
Follow Challenge Intent
Solve challenges as designed. If you discover an unintended solution ("unintended solve"), feel free to use it — but please report it to organizers afterward.
07
Flag Submission
Flags must be submitted through the official scoreboard. Any attempt to manipulate scoring is grounds for immediate disqualification.
08
No Physical Tampering
Do not interfere with conference equipment, hardware challenges, or venue infrastructure outside of intended interaction.
09
Respect Other Participants
Harassment, intimidation, or disruptive behavior toward others will not be tolerated. Treat everyone with respect.
10
Stay Within Legal Boundaries
Any activity that could violate local, state, or federal law is strictly prohibited. This is a simulation — keep it that way.
11
Report Issues
If you find bugs, vulnerabilities, or infrastructure problems that are clearly unintentional, report them to organizers promptly rather than exploiting them.
12
Organizer Decisions Are Final
In the event of disputes, rule clarifications, or edge cases, the organizers' decisions are final. No appeals after the fact.
13
AI Usage
You're welcome to use AI tooling to assist you, but do not utilize AI autonomously to solve challenges for you. If an organizer asks, you should be able to explain how you solved something. The goal is education and competition — not "watch my AI agent go." Overuse of AI could lead to disqualification from a top-3 winning position.
14
Have Fun
This is a learning and community event. Challenge yourself, help each other grow, and keep it positive. The best CTF memories come from the people, not the points.