Contest Information

Contest Information

19 April 2025, 8:00PM HKT - 21 April 2025, 8:00PM HKT
Online Jeopardy-style CTF competition
Application Deadline: 18 April 2025, 8:00PM HKT
Application Form: Register Here Now
There will be benefits from advantageous admission conditions if winning team members aspire to pursue undergraduate programmes at PolyU.

Challenge Types

Binary Exploitation
Cryptography
Forensics
Reverse Engineering
Web Exploitation
Miscellaneous
and more...

Competition Categories

Secondary School
All full-time secondary school (or equivalent qualification) students in Hong Kong

Sub-Degree
Full-time students currently enrolled in a Higher Diploma or Associate Degree programme in Hong Kong who are 25 years old or younger during the competition period

Degree
Full-time students currently enrolled in a Bachelor’s Degree programme in Hong Kong who are 25 years old or younger during the competition period

Invited
Any teams invited by the organizers to participate in the competition will not have their scores included in the rankings and are ineligible for any prizes. No limitations on team formation are imposed for the Invited Category.


This contest is a team competition. The maximum number of team members is FOUR. Each team and participant can only join ONE of the categories.

Within a single category and team, team members can be from different schools / institutions.

All teams and participants must comply with the rules set by the organizers. The organizers reserve the right to determine the eligibility of each team and participant.

Write-up Verification

The top 5 teams of each category (except invited teams) are required to submit proof of their efforts (write-ups) on 3 solved challenges randomly selected by the organizers. The organizers will confirm the final ranking after the verification of the write-ups is completed.

Team Names

Team names are composed of two parts: “Team ID” and “Team Name”. “Team Name” is either the name of the school/institution or any self-defined name during registration. The naming format of each category is shown below:

For all teams:

Self-defined name with a maximum of 32 English alphabets, numbers, and special characters, or assigned by the organizers

Name format is {Team ID} – {School name of the members} | {Team ID} – {self - defined name}
E.g. S0001 – Hung Hom East Secondary School
E.g. S0002 – >_< team haha >_<
E.g. H0001 – HKCC, H0002 - HKUSpace
E.g. H0003 - CTFCrew
E.g. U0001 – CUHK, U0002 – PolyU, U0003 – AbcdU
E.g. U0004 – CTFlovers

For invited teams only:

Self-defined name with a maximum of 32 English alphabets, numbers, and special characters

Name format is {Team ID} – {Team name of the members}
E.g. I0001 – CTFExpert

The organizers reserve the right to change your team’s name at any time without prior notice if it is deemed inappropriate or in violation of any rules.

Rules

  1. Top 5 teams of each category are required to submit write-ups before the deadline specified by the organizers.
  2. Team names should not contain any sexual, violent, inappropriate, or political content. The format for team names is stated in the aforementioned "Team Name" section.
  3. There are no limits on the number of teams per institution for all categories.
  4. Representatives of the contest's Organizing Committee(s) and Sponsor(s) are not eligible to participate in this contest.
  5. The organizers will officially announce the champion, first runner-up, and second runner-up after confirming and verifying the write-ups from the top 5 teams. To ensure fairness in the competition, further investigation and questioning may be conducted if any suspicious activities are detected during or after the competition.
  6. Interruption to the CTF platform by any means is strictly prohibited. Including but not limited to:
    • Unauthorized modifications to the scoreboard
    • Generation of excessive load (E.g.: using tools such as dirbuster and ffuf)
    • The launching of Distributed Denial of Service or Denial of Service Attacks
    • Attacking machines or services other than the designated challenges
    • Attacking members of PolyU or NuttyShell and their infrastructures, physically or virtually
    • Any other types of activities deemed to be harmful to the organizers, the competition, or any contestants
  7. No cheating or interruption to the contest, such as:
    • Asking or begging for flags
    • Sharing flags
    • Deleting flags
    • Sharing account credentials across different teams
    • Preventing other teams from submitting flags
  8. No social engineering attacks are allowed on other teams or the organizers.
  9. Physical security attack of any kind is not allowed.
  10. In the Discord chatroom:
    • Follow all rules as listed on our Discord server.
    • Do not send any violent, obscene, indecent political content or content that violates Discord’s policy.
    • Do not upload any files that infringe copyrights and intellectual property rights.
  11. If any issues arise during the contest, participants must report them to the organizers immediately.
  12. Do not share any part or details of the CTF challenges with anyone before the end of the contest.
  13. Any abuse or violation of the rules will result in penalties, including but not limited to disqualification and revocation of winning titles.
  14. In the event of any disputes regarding prizes, rankings, or other competition matters, the organizers reserve the right to make the final decision.
  15. The English version shall prevail in case of any discrepancy or inconsistency between the English version and its Chinese translation.