Rules & Regulations

Play fair. Stay in scope. Learn. Have fun.

Teams & Registration

  • Teams should have up to 4 members.
  • If you register alone, volunteers will auto-assign you to a team.
  • All team members must be registered before the CTF begins.

Challenge Structure

  • All participants must complete the “Guided Track” first.
  • Completing the Guided Track unlocks all other categories.
  • Available categories: Cryptography, Forensics, OSINT, Steganography, and Web.
  • Some challenges unlock only after solving all in a category.

Support & Communication

  • Join our Discord server for:
    • Challenge hints & help
    • Event announcements
    • Scoring updates
  • Do not ask other teams for hints — use Discord or ask organizers.

Fair Play & Ethics

  • NO DDoS, DoS, or network flooding — immediate disqualification.
  • NO sharing flags with other teams or public channels.
  • NO social engineering, physical tampering, or cheating.
  • NO modifying or faking flags.
  • Keep solutions private — don’t spoil challenges for others.

Scope & Technical Boundaries

  • Only attack what’s in scope: CTFd platform and provided challenges.
  • Do NOT scan or probe Saint Peter’s University network or systems.
  • Do NOT intercept network traffic outside your session.
  • Do NOT disrupt scoring infrastructure or other teams.
  • Automated tools are allowed — but use them responsibly.

Scoring & Submissions

  • Any team member can submit flags.
  • Using a hint reduces your points for that challenge.
  • Flag format: isc2nj{example_flag}
  • Only the first valid submission counts.

Tools & Resources

  • Use any tools you like — CyberChef, Burp, Python, etc.
  • Bring your own secured laptop.
  • Tools must not violate scope or fairness rules.

Conduct & Venue

  • Respect everyone — participants, organizers, and university property.
  • No harassment or disruptive behavior.
  • Keep noise levels low — this is a thinking space.

Enforcement

  • Violations → warning → point loss → disqualification.
  • Organizers have final authority on all decisions.
  • Serious offenses will be reported to university authorities.