CYBERFOXESThe Decree
Before you take your place at the marble, read the laws of the arena. These rules exist so every operative competes on equal ground, the venue stays safe, and the contest remains a test of skill not shortcuts. Violations may result in score penalties, removal from the Event, or referral to the appropriate authorities.
For the full legal framework, see the Terms & Conditions. Questions? Write to fvolpindo@student.hau.edu.ph or fourtholpindo@gmail.com.
I · The Laws of the Arena
Arrive with a laptop you control. Pre-install your toolkit (terminal, debugger, browser, VPN client if needed, and any preferred VM). Ensure the battery is charged and you can install software during the Event. Shared or borrowed machines are discouraged; you are responsible for everything run on your device.
Use a wired connection whenever possible for stability during active exploitation. Bring an Ethernet adapter and cable if your laptop lacks a built-in port. Wi-Fi is available as a fallback, but wired links take priority at congested tables.
Remain in your assigned seat and designated competition areas. Do not touch another participant's equipment, cables, or notes without explicit permission. Keep walkways clear, lower your voice, and treat venue staff and fellow competitors with courtesy.
Compete with integrity. Do not share flags, solutions, or exploits with other participants during the competition window. No collusion, no plagiarism of write-ups, and no misrepresentation of your work. The spirit of the game matters as much as the score.
Artificial-intelligence assistants including ChatGPT, Copilot, Claude, Gemini, and similar tools are prohibited for solving challenges during the Event. Your solutions must come from your own analysis, research, and skill. Organizers may monitor for violations.
Attack only the challenge systems and services explicitly designated by the Organizers. Do not scan, probe, or disrupt the scoreboard, venue network, other participants' machines, or any out-of-scope infrastructure.
Obey the directions of Marshals, moderators, and venue staff at all times. Announcements during the Event override anything published earlier if a conflict arises. Raise disputes only through official channels.
Each individual may hold only one registration and one set of credentials. Impersonation, duplicate accounts, or shared logins are grounds for disqualification. Use the code name you registered with on the scoreboard.
Denial-of-service attacks, flooding the flag-submission endpoint, brute-forcing the scoreboard, and any action that degrades the Event for others are strictly forbidden. Respect published rate limits and resource constraints.
Platform logins and any credentials issued by the Organizers are for your use alone. Do not share them with teammates unless explicitly permitted by the Event format. You are liable for all activity under your account.
Enforcement
The Organizers may warn, penalize, disqualify, or ban any participant who violates these rules or the Terms & Conditions. All enforcement decisions are final. Serious misconduct may be referred under Republic Act No. 10175 (Cybercrime Prevention Act of 2012).
II · The Rite in Motion
Competition day is 07 August 2026. Exact call times and venue details arrive by email after registration. The sequence below is the expected arc; minor adjustments will be announced by the Marshals.
The enlistment window has ended and no further registrations are accepted. Operatives already on the roster should now verify their email for Discord, where the Marshals post every subsequent notice.
Registered operatives receive competition credentials, the platform link, schedule, venue map, and any last-minute rule updates. Check spam; corruption hides things.
Present yourself at the venue on competition day. Verify your identity against your registration. Collect your seat assignment and any physical materials provided by the Organizers.
Power on your laptop, connect via Ethernet where available, and confirm network access. Install or verify any last-minute tools. Log in to the competition platform to confirm your credentials work.
Marshals deliver a final in-person review of these rules, scope boundaries, and emergency procedures. Ask questions before the gates open; no excuses after the horn sounds.
The jeopardy-style CTF begins. Browse challenges across seven disciplines, solve problems, capture flags, and submit them through the official platform. Dynamic scoring may apply.
At the announced end time, the submission window closes. Save your work. Disconnect from challenge infrastructure as instructed. No flags submitted after close will be counted.
Organizers verify submissions, resolve tie-breakers, and address disputes raised through official channels within the published timeframe. Standings may be adjusted for rule violations or broken challenges.
Final rankings are announced. Certificates, prizes, or recognition are awarded to eligible participants who complied with all rules. Celebrate the marble; honor the operatives who earned it.