CTF-ORION
Start learning
fair play

Fair play rules

These rules apply to every player, team and event. Short, and the same for everyone.

Read the rules Report a violation
Flags are for solving, not for sharing.

Sharing flags hides who solved what and makes the scoreboard unreliable. In events we look for it, act on it, and publish who was involved.

The rules

Short on purpose. If something feels like it breaks the spirit of these, it probably does.

One person, one place

One account per person and one team at a time. Accounts used by the same person in several places, or shared between people, are restricted.

Restricted

No flag sharing in events

Flags, solutions and hints stay inside your team until the event ends. If we trace a shared flag, the team that used it can be banned, and so can the team that shared it.

Ban

Sharers are named

When a flag leak is confirmed, we publish the name of the player or team who shared it, on the event page and the scoreboard.

Named publicly

Leave the platform alone

Attack the challenges, never CTF-ORION itself or other players. Found a real bug in the platform? Report it and we will credit you.

Ban

No brute-forcing flags

Guessing flags by script floods the system and tells you nothing. Submission rates are limited, and automated guessing is treated as cheating.

Restricted

Writeups after, not during

Publishing solutions is great for learning, once the event has closed. Practice challenges can be discussed, but please don't post flags.

Removed

How a shared flag gets traced

In events, every team receives its own unique version of each flag. A flag only one team could have seen, submitted by another team, leaves a clear trace.

Step 1

Each team gets its own flag

CTF-ORION{plain_sight_a7f3}

Team A's copy of the flag is different from everyone else's.

Step 2

Someone passes it on

Team A → Team B

A member of Team A sends the flag to Team B outside the platform.

Step 3

The mismatch shows up

Team B submits …_a7f3

Team B submits a flag that belongs to Team A. Both teams are flagged for review.

Step 4

Confirmed, then acted on

case confirmed
  • Team B can be banned from the event
  • Team A can be banned too
  • The sharer is named publicly

What restricted and banned mean

We always look at the evidence before acting, and every decision can be appealed once.

Restricted

  • The account is hidden from all scoreboards
  • Flag submissions are paused while we review
  • Learning paths stay open, because learning is for everyone

Banned

  • The team or player is removed from the event and its results
  • For flag leaks, the sharer is named on the event page
  • Repeat cases can lead to a platform-wide ban

Report or appeal

Saw a flag posted somewhere, or think a decision about you was wrong? Write to the integrity team. Reports can be anonymous.

  1. Send what you saw

    Links, screenshots and times help most. Never repost the flag itself in public.

  2. We review the evidence

    Submission logs and traces are checked by at least two people before any action.

  3. Decision and appeal

    Everyone involved hears the outcome and can appeal once with new information.

[email protected]