Acceptable use
Attack the targets. Not the platform, not each other.
Yes
- Attack the challenge environments provisioned to you, in any way you like.
- Automate against your own environment.
- Write up and discuss what you solved, once a challenge is not part of a running competition.
No
- Attacking the platform itself. The site, its API, its database, other people's
environments, and the infrastructure underneath are out of scope. If you find something anyway, tell us — that is welcome, and attacking further is not.
- Sharing flags. Flags are issued per participant and reuse is detected. Sharing one gets both
accounts flagged.
- Automated abuse. Scripted account creation, brute-forcing submissions, or scraping.
- Interfering with other participants, including exhausting shared capacity on purpose.
Enforcement
Operators can invalidate solves, disqualify an account from the leaderboard, or suspend it. Every such decision is recorded in an audit log with who made it and when.