🛡️ Capture The Flag (IMECTF) Competition Rules

📜 1. General Conduct

• Sportsmanship First: Treat fellow participants, organizers, and infrastructure with respect. Toxic behavior, harassment, or unsportsmanlike conduct will result in immediate disqualification.
• No Sabotage: Do not disrupt other teams’ progress (e.g., DDoS, resource exhaustion, flag hoarding, or false flag planting).
• No Sharing Flags: Flags are for submission only—do not share with other teams or public channels (including write-ups during the event).
• Verification: At any point of the CTF, I can ask you for a write up of a certain challenge. You must send it to me, otherwise you will receive a penality or even the eleminations from this CTF.

🔐 2. Flag Format & Submission

• All flags follow the format:
  IMECTF{...}
  — case-sensitive and exact.
• No brute-forcing flag submissions. Excessive attempts may trigger rate-limiting or disqualification.
• Some challenges may ask for a different number of flags, you won't recieve any points until you claim all the flags of the challenge

⚙️ 3. Technical Boundaries

• Scope is Sacred: Only attack designated challenge hosts/domains. Scanning or exploiting infrastructure outside the provided scope is strictly forbidden.
• No Automated Aggression: While scripting is allowed, aggressive scanning (e.g., full-port nmap sweeps, dirbusting with huge wordlists) may be throttled or blocked.
• Zero-Day Disclosure: If you discover a critical platform vulnerability unrelated to a challenge, report it to admins immediately—do not exploit it.
• Take your time: enumerate thoroughly, document everything, and stay methodical. Rushing leads to missed clues and lost progress.

🏆 4. Scoring & Winning

• Points are awarded per challenge based on difficulty (visible on the scoreboard).
• First Blood bonuses may apply for the firsts solvers of a challenge.
• Tiebreakers are resolved by earliest submission time.

🚫 5. Prohibited Actions

Violating any of the following will result in score reset, team disqualification, or ban:

• Attacking the CTF platform itself (excluding intended challenges).
• Sharing credentials, flags, or solutions during the event.
• Impersonating organizers or manipulating the scoreboard.
• Using external help (e.g., paid solvers, non-team members).

🆘 6. Need Help?

• Contact admins via the official Discord/Slack channel or support email.
• Do not publicly discuss challenge specifics—use private tickets.
• Clarifications may be broadcast to all teams if they affect fairness.

🕒 7. Event Timeline

---