BCS CTF 2026 Rules

These rules protect fair play, platform stability, participant safety, and the integrity of the final ranking.

Participation Rules

  • Teams must use only their own accounts and registered team identity.
  • Do not share flags, private hints, challenge solutions, accounts, or team invite codes outside your team.
  • AI tools may be used as a human assistant for learning, reasoning, scripting, summarizing, and debugging, but teams remain responsible for their own work and submissions.
  • Top teams must submit solution writeups when requested so the organizers can verify the solving process.
  • Hints may reduce points depending on the challenge configuration.

Submission Rules

  • Attempts may be limited per challenge. The standard maximum is 5 incorrect attempts unless the challenge states otherwise.
  • Very fast or repeated submissions may be queued, rate-limited, reviewed, or rejected.
  • Bruteforce attempts against flags, forms, services, APIs, or challenge infrastructure are prohibited.
  • Automated flag guessing or dictionary-based submission will result in team restriction or ban.

Platform & Infrastructure Rules

  • Do not attack the scoreboard, platform, authentication system, database, hosting, event website, or any infrastructure not explicitly included in a challenge.
  • Do not perform denial-of-service, stress testing, scanning outside the challenge scope, or destructive activity.
  • Respect instance limits. Each member may run a maximum of 2 challenge instances at a time when instance mode is enabled.
  • Challenge instances run for the configured time window and may be extended only when the remaining time is within the allowed extension window.

Fair Play & Verification

  • Organizers may restrict scoreboard visibility, block suspicious IP addresses, suspend a player, or restrict a team when required for fair play.
  • Organizers may ask for logs, writeups, scripts, or explanations from high-ranking teams before final award confirmation.
  • Any vulnerability discovered in the platform must be reported privately to the organizing team.
  • The decision of the BCS CTF 2026 organizing team is final for ranking, award eligibility, and rule enforcement.

Award Eligibility

Top 100 teams overall will receive digital certificates. Top 50 Bangladesh teams will receive entrance tickets for BCS ICT Fest 2026. Top 3 student teams from Bangladesh and top 3 professional teams from Bangladesh will be awarded after verification.