KTT CTF Rules

Welcome to KTT CTF. By participating, you agree to follow these rules and to help keep the event available and enjoyable for everyone.

Getting started

• Create and use only your own CTFd account or your registered team account.

• All flags use the format KTTCTF{...}.

• Test your account, submission route, and flag format with the Welcome sanity check before solving anything else:

  KTTCTF{welcome_to_ktt_ctf}

The sanity-check flag is intentionally published and belongs to the Welcome challenge.

Challenge and flag rules

• Solve challenges only through the interfaces and artifacts provided by the event.
• Do not submit, publish, or share flags belonging to another team or account.
• Do not attempt to access organizer-only files, challenge solutions, CTFd administration, databases, environment variables, or infrastructure that is not part of a challenge.
• Do not use a discovered flag to impersonate another team or alter scoring.
• Challenge flags are case-sensitive unless the challenge says otherwise.

Infrastructure and availability

• Do not run denial-of-service tests, high-volume scanners, destructive payloads, or resource-exhaustion attacks.
• Keep automated requests reasonable and respect any rate limits shown by the service.
• Do not attack the CTFd host, other teams, unrelated systems, or third-party services.
• If a challenge service becomes unstable, stop testing it and report the issue to the organizers.

Collaboration and conduct

• Collaboration within your registered team is encouraged.
• Do not share flags or complete solutions with other teams during the event unless the organizers explicitly announce that writeups are open.
• Do not create throwaway accounts to bypass hint costs, rate limits, or team restrictions.
• Harassment, discrimination, credential theft, doxxing, and real-world targeting are prohibited.

Hints and scoring

• Free hints have no score cost.
• Paid hints deduct the displayed cost from your account or team score when unlocked. The deduction is permanent for that solve attempt.
• Hints are optional; do not assume that a hint reveals a complete solution.
• Scores and challenge availability are controlled by CTFd and may be frozen or adjusted by organizers to correct an infrastructure or configuration error.

Reporting issues

Report suspected bugs, accidental flag exposure, service outages, or rule violations privately to the organizers through the event support channel. Do not publish the details before the organizers have had a chance to respond.

Organizers may reset a challenge, invalidate an exposed flag, adjust scores, or remove an account when necessary to preserve fair play and event availability.