Sp00ky CTF Rules
By registering for sp00ky ctf you agree to the following rules and liability disclaimer
The scores for any of the challenges are subject to change throughout the day as they are adjusted for difficulty scaling.
The following activities are expressly FORBIDDEN:
1. Registering your account with an email address that does not belong to you
(you are expected to register with @iastate.edu if you are a student)
2. Active scanning of any type against the competition domains
3. Denial of Service of any type against the competition domains
4. Establishing persistence on any systems that become compromised during the competition
5. Attempting to access challenge boxes (torture chambers) outside of the designated competition time
6. Attacks of any type against the admins or other competitors
(Attacks are defined as actions taken with the intent to cause harm.)
(Attacks that cannot be attributed to malice do not mean that they will not result in a ban)
7. Sharing flags with anyone other than your team members before the finish time of the competition
8. Operating a team with more than 4 contributors
9. Harassment and unsportingly or disrespectful conduct
If you ever find yourself in the question of what legal competition actions you are allowed to take to complete a challenge, please discuss with a Sp00ky admin to confirm the legality of your intended action(s).
Just don't be dumb
While there are flags on the scoring platform (https://spookyctf.boo) rule 2, above, forbids competitors from "Active scanning of any type against the competition domains." This includes fuzzing and any other active enumeration techniques. We are all here to have fun and hone our h4ck3r skills. A general rule of thumb is to not do things that will hinder the success of the competition of sp00ky or the success of your fellow competitors.
Failure to follow the rules will result in a permanent ban from competing in sp00ky
Sp00ky admins reserve the right to permanently ban players and/or teams at any time before, during, or after the competition. Sp00ky admins will justify the administration of bans, through their interpretation alone, of the rules set forth by this document.
Limitation of Liability & Disclaimer of Warranties:
IN NO EVENT WILL THE HACKING AND CYBERSECURITY CLUB, IOWA STATE UNIVERSITY, SPOOKY CTF, OR ITS AFFILIATES, SUBSIDIARIES, AND RELATED COMPANIES, OR THEIR RESPECTIVE OFFICERS, DIRECTORS, EMPLOYEES, REPRESENTATIVES, AND AGENTS, BE RESPONSIBLE OR LIABLE FOR ANY DAMAGES OR LOSSES OF ANY KIND, INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL OR PUNITIVE DAMAGES ARISING OUT OF YOUR PARTICIPATION IN THE CONTEST OR FOR ANY ACTION OR OMISSION MADE IN CONNECTION WITH THE CONTEST. WITHOUT LIMITING THE FOREGOING, EVERYTHING IN THESE RULES AND IN THIS CONTEST, INCLUDING THE PRIZES AWARDED, IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT.