OCRI CTF
Fair Play Rules

Our goal is a fun, fair, and educational event. Please follow the rules below to keep the competition stable and enjoyable for everyone.

Teamwork encouraged: Discuss, research, and learn together. You will not be penalized for wrong submissions—try ideas and iterate.
Flag format:
Most flags look like ocri{...} and may include letters, numbers, dashes, or underscores.

1) Respect the game & others

  • Your targets are the challenges, not the CTF infrastructure, other players, or staff systems.
  • No harassment, no disruption, and no intentional denial-of-service behavior.

2) Use tools wisely

  • Avoid high-volume automated scanning/exploitation tools unless staff explicitly says they’re allowed for a specific challenge.
  • If you think a tool may impact performance, ask first.

3) Keep it fair

  • No flag sharing between teams.
  • No exploiting unintended platform bugs to gain points unfairly.

4) Protect future learners

  • Do not post write-ups/solutions publicly after the event.
  • In-person learning discussions after the competition are encouraged.

5) AI use policy

  • AI tools are allowed to support learning (ideas, explanations, debugging help).
  • Do not use AI as a full “solve it for me” replacement; own your learning.
  • Staff may not be able to troubleshoot issues caused by AI-generated mistakes.

6) When something breaks

  • If a challenge instance behaves oddly or seems down, report it to staff with screenshots/timestamps.
  • Do not “stress test” infrastructure to prove it is broken.
Keep it fair, have fun, and happy hacking.
If you look closely, you can even find a flag on this page.
If you’re unsure whether an action is allowed, ask event staff before trying it.