Platform rules

Fair play

• Work independently. Solve challenges using your own skills and research. Sharing flags or writeups with other players while a challenge is active isn't allowed.
• One account per person. Multiple accounts to farm points or bypass sequential unlocks will be removed from the scoreboard.
• No attacks on the platform itself. Challenges are the target. The CyberFlag infrastructure, other players' accounts, and the scoreboard service are not. Report anything you find instead of exploiting it.
• No automated brute-forcing of flag submission endpoints. Rate limits are in place, and accounts that trip them repeatedly may be suspended.

Flag format

Every flag follows the format CyberNet{...}. Submit it exactly as found, including case, since flags are checked case-sensitively.

Scoring and the scoreboard

• Points are awarded once per challenge, on your first correct submission.
• Ties are broken by time, not recency: if two players end up with the same score, whoever reached that score first ranks higher, not whoever solved most recently.
• Challenges inside a sequential group must be solved in order; solving one unlocks the next.
• Standalone and parallel-group challenges can be attempted in any order.

Account policy

• Signups are verified by a one-time code sent to your email before your account can submit flags.
• Access is tied to an active membership. If your account shows as expired, contact info@cybernet.ae to renew.
• Keep your credentials private. You're responsible for activity submitted from your account.

Code of conduct

Treat other players, and the platform, with respect. Harassment, sharing of others' personal information, or attempts to disrupt the platform for other users will result in account suspension. If in doubt about whether something is in bounds, ask before you try it.