Rules

Every flag follows the format ZDA{...}, for example ZDA{this_is_an_example}. Flags are case-sensitive; surrounding whitespace is ignored.

• Each challenge is worth a fixed number of points, shown on its card.
• The first player to solve a challenge is credited with first blood.
• Players with equal scores are ranked by who reached that score first.

Some challenges offer hints. Unlocking a hint deducts its cost from your score immediately and can't be reversed. Once you solve a challenge, its hints become free to read.

• Sharing flags, solutions or hints with other players is prohibited.
• One account per person. Don't register multiple accounts.
• Flag submissions are rate-limited. Brute-forcing flags is not allowed.
• Organizers may suspend accounts that break the rules and adjust scores accordingly.

• Only attack the hosts and services listed in a challenge's connection details.
• Don't attack this scoring platform, and don't run denial-of-service attacks against anything.
• If you find a bug in the platform itself, report it to the organizers instead of exploiting it.