Safety
Isolation is the product
A match that can reach the rest of the network is not a match. It is an incident. If isolation checks fail, play does not start.
01
Assigned arena only
You may use the attacker box, the defender box, and the official gate for your session. Not other sessions. Not the hypervisor. Not the router. Not our public websites. Not the internet.
02
Do not attack the checksystem
The gate, clocks, and reset path are out of scope. Flooding them or breaking them is a foul.
03
Do not deny service
Do not flood the VLAN. Do not wipe a machine so the other side cannot play. Do not take a box down for spite.
04
Tools stay on the box
Matches begin with stock tools. Extra tools later still live on the assigned virtual machine. Do not aim tools from a home computer at a public address. Arenas do not get public IPs.
05
Keep the flag checkable
Move the prize file if you are the defender. Do not edit or delete it. A missing or mutated flag cannot be scored.
This site will never publish how to take a flag. Instructor notes stay off the public internet. We do not run this origin on a laptop.
Questions about scope go to the house.
If you are unsure whether something is in scope, it is out of scope until a ref says otherwise.