RULES

Read carefully. Violations result in disqualification and prize forfeiture.


Team Rules

  • One team per person - no participating on multiple teams
  • Team captains are responsible for their team's conduct


Challenge Rules

  • Flags format: upCTF{...} (case-sensitive)

Fair Play


Strictly Forbidden

  • Sharing flags, exploits, or solutions with other teams
  • Collaboration between different teams
  • Automated flag submission or brute-forcing flags
  • Plagiarizing writeups

Allowed

  • Using any tools for solving challenges
  • Public discussion of challenges after the CTF ends
  • Publishing your writeups after the CTF ends

What You Cannot Attack

Attacking any of these = instant disqualification:

  • Other teams
  • CTF platform, scoreboard, or website
  • Our infrastructure (no DoS, port scanning, brute-force)

In short: Only attack the challenges. Everything else is off-limits.



Prizes

  • Top 5 teams win prizes (see Prizes Page)
  • 4 writeup prizes for designated challenges
  • Prize codes sent to team captain's email only - never via Discord DM
  • Claim within 14 days or forfeit
  • Minors may require parental consent
  • Winners must verify identity if requested

Writeup Requirements

  • Submit via Google Form (in challenge description)
  • Deadline: 24 hours after CTF ends
  • Must include: explanation, screenshots, code, and correct flag
  • Must be original work (English or Portuguese)
  • Full writeup guidelines on Prizes Page

Disqualification

Instant disqualification for:

  • Breaking any anti-cheating rules
  • Attacking infrastructure, platform, or other teams
  • Multiple accounts or teams
  • Plagiarism or unsportsmanlike conduct

Consequences:

  • Removed from scoreboard
  • No prizes (even if earned before)
  • Can happen even after the event

Need Help?

Note: We only grant time extensions for platform-wide downtime, not personal internet issues.