Rules

• No scanning or port enumeration of the server.
• No fuzzing endpoints or parameters.
• No AI assistance (ChatGPT, Copilot, etc.).
• No automated tooling unless explicitly allowed by the challenge text.
• No DoS, brute force, stress testing, or performance probing.
• No attacking infrastructure outside this domain / box / scope.
• No teaming, helping/assisting others.
• Do not attempt to identify, target, or interfere with other participants.
• Do not upload malware or anything illegal.
• All activity may be logged for abuse prevention.
• Breaking rules = disqualification and possible ban.
• A valid writeup must be submitted in order to win. The writeup must be produced in compliance with all rules above. Any rule violation during completion of the challenge or creation of the writeup may void the writeup and result in disqualification (no win), even if the final flag(s) are obtained.
• Winnings will be given in ethereum, if you miss any side challenges you will miss out on extra money to be won (max $50 USD) base challenge is $20, first to finish ends the challenge.