Rules & Code of Conduct

Use one account per person, follow event-specific eligibility requirements, and interact only with challenge systems that are explicitly in scope. Organizers may publish additional rules for a specific CTF.

Flags are submitted through the Challenge Board. A common format is CTF{example_flag}. Submit flags exactly as provided by the challenge.

Do not share active flags, screenshots containing flags, or direct solutions while an event is live unless an organizer explicitly permits it.

• Attacking CTFWall, organizer, sponsor, scoring, authentication, or unrelated infrastructure.
• Flag sharing or receiving flags from outside your registered team.
• Denial-of-service, destructive actions, uncontrolled brute force, or traffic intended to degrade service.
• Multiple accounts, identity manipulation, or deliberately bypassing event eligibility controls.
• Using leaked challenge material or unreleased flags.

Team membership, maximum size, captain permissions, and roster lock timing are defined per event. A player may not compete for multiple registered teams in the same event unless the organizer explicitly allows it.

Penalties depend on severity, evidence, impact, prior behavior, and event rules. Organizers may skip lower steps for serious abuse.

Report suspected cheating or abuse privately. Include the event, challenge, team or user, timestamps, and supporting evidence. Do not publicly accuse participants during an active investigation.

Players or teams may appeal moderation or scoring actions by providing relevant evidence. Appeals should be concise, factual, and submitted through the event organizer or CTFWall support channel identified in the decision.