Rules

The CyberBowl CTF runs from Saturday, September 19 at 11am EDT to 11pm EDT.

• The flag regex is: USCC\{[A-Za-z0-9_!?\}. Flags may include spaces. Any differing flag formats will be noted on challenge pages.
• Do not attack the CTFd server. Do not sabotage infrastructure for other teams, either.
• Automated scanning tools like dirb, sqlmap, gobuster, etc are NOT allowed (and not needed) on shared servers within Web, Pwn, Misc, etc.
• The Network Exploitation category challenges run on servers unique to each team; therefore, you ARE allowed to use automated scanning tools within this category. If you are unsure if a tool is allowed or not, please ask.
• AI agents may not send traffic directly to hosted challenges. You may collaborate with LLMs to write scripts to interact with the challenges, but you need to be the one running (i.e. in control of) the scripts. You are responsible for the traffic you are sending.
• If you play in the CyberBowl CTF, you are ineligible for CTF prizes in future USCC camps.

If you need help or have questions, please reach out to the CTF team in Discord. Our names have "CTF - " prepended.