OCRI CTF
Fair Play Rules

Our goal is a fun, fair, and educational event. Please follow the rules below to keep the competition stable and enjoyable for everyone.

Teamwork encouraged: Discuss, research, and learn together.
Flag format:
NOTE! For most flags, you will simply enter the response in the answer field. Sometimes, they will be case sensitive, but you should be notified within the question. Some flags look like ocri{...} and may include letters, numbers, dashes, or underscores.

1) Respect the game & others

  • Your targets are the challenges, not the CTF infrastructure, other players, or staff systems.
  • No harassment, no disruption, and no intentional denial-of-service behavior.

2) Use tools wisely

  • A simple search using a search engine will not likely provide a solution (flag).
  • However, you are encouraged to use online cybersecurity tools and resources in solving the problems.

3) Keep it fair

  • No flag sharing between teams.
  • No exploiting unintended platform bugs to gain points unfairly.

4) Protect future learners

  • Do NOT post write-ups/solutions publicly after the event.
  • Do NOT discuss the questions with members from the other CTF session/group.

5) AI use policy

  • Do not use AI as a full “solve it for me” replacement; own your learning.
  • Staff may not be able to troubleshoot issues caused by AI-generated mistakes.

6) When something breaks

  • If a challenge instance behaves oddly or seems down, report it to staff, and take screenshots/timestamps.
  • Do not “stress test” infrastructure to prove it is broken.
Keep it fair, have fun, and happy capturing!
I confirm I read the rules — Register Go to Challenges
If you’re unsure whether an action is allowed, ask event staff before trying it.