Rules

Read these CAREFULLY. If you break a rule, it's grounds for disqualifiction and we will kick you (we're nice until you do stupid things and are unapologetic...)

  1. You must register for this CTF with your BYU email. If you have a problem with that, talk to overllama
  2. Do not DOS/DDOS. This means no automated scanning tooling on any challenges hosted remotely (web/pwn) unless specified by the challenge. This includes custom scripts... just make sure you don't bring anything down, we don't have infinite resources for infra
  3. No brute forcing. Including guessing flags
  4. No flag sharing. If you give or accept a flag to/from another player, you are both disqualified
  5. No teams. To keep challenges easier than a typical CTF, this is an individual CTF. This means you are not allowed to get help from other players, your parents, teachers, or real people on the internet (i.e. no asking in a discord, reddit, irc, etc. Feel free to google and use resources already online)
  6. If you don't use common sense, that's your fault. You accept responsibility for running commands from ChatGPT or the internet, and for any buttons you press or binaries you run. There is no guarantee that a given challenge won't mess with you, and we aren't responsible for you pressing the play button. (No challenges that I know of are malicious, but we gotta have this anyways)
  7. No flag hoarding. We like to keep it fair and visible, and so this is in the rules. Basically, it just means if you submit all of your flags in the last hour (or anything similar to that), you're disqualified.
  8. This is a CTF for humans. If you are using an agentic system to solve challenges or just letting AI do everything for you, you are not eligible for prizes. We will ask everyone who ends up at the top to verify the humanity of their participation, and if we have good reason to believe you let AI compete for you, we will kick you from the scoreboard. If you want to just play with an agentic system and not be eligible for prizes, let us know so we can hide you from the scoreboard and then it's fine.
  9. The organizers reserve the right to make any and all final decisions, including changing these rules mid-competition and kicking anyone. You can complain, but please be respectful. If you are following these rules, we can guarantee you will not be kicked

Additional Details / Rules

  1. Challenge authors and CTF staff are not required to answer your questions. Usually we will because we like being helpful, but you are never entitled to an answer. The exception is you can always get a confirmation of whether a remote instance of a challenge is still working (thumbs up or thumbs down basically)
  2. The rules flag is: byuctf{i_can_read_at_least_at_a_5th_grade_level}
  3. To be eligible for prizes, you must: be a BYU student, be a dues-paying member of the Cybersecurity Student Association, and be present at the award ceremony (6:30 pm MST, Saturday, April 11th, 2026)
  4. The scoreboard will close at 12pm on Saturday, April 11th. This is to help the award ceremony be a bigger event