Share flags with or give help to other participants
Use automated scanning and probing tools such as Nmap, Gobuster, Dirb, sqlmap, etc. unless specified in the challenge description
Attempt to (or succeed at) DoSing or DDoSing any infrastructure or other participants.
Try to brute force flag submissions, including creating alternate teams/accounts for extra attempts. Just git good.
Hoard flags. Any user that solves multiple challenges but doesn't turn in the flag until the last moment to trick others into thinking they will win will be punished. If you're really good enough to win, you don't need to do this.
ASK FOR HINTS by directly DMing an organizer, asking in Discord, or filing a ticket. NO HINTS WILL BE GIVEN except to the entire player base, and general hints will be given out in the #announcements channel on Discord.
Notes:
The flag format is byuctf{example_flag}
All flags are case insensitive unless specified.
Scoring is dynamic and decreases in value as more participants solve the problem. Challenges start at 500 points.
If any challenges are broken, you feel the flag you have is correct, or you have any other questions, please submit a ticket on Discord.
If you do anything that we believe to be directly against the spirit of the competition, we reserve the right to remove anyone at any point. Please don't make us do that. This is for your learning and benefit.