Rules & Policy

Read these guidelines before the event. Participation implies acceptance of all rules.

Challenge Rules

Levels are sequential
You must complete each level before unlocking the next. There is no skipping. Levels progress from networking fundamentals through to advanced web exploitation.
Hints are available but tracked
Each level may have an optional hint. Click "Show Hint" to reveal it. Hint usage is recorded in your activity log and visible to the administrator for reporting purposes.
Learning notes are always shown
Whether your answer is right or wrong, a learning note will appear explaining the concept. The goal of this challenge is learning — not just winning.
Bonus challenge
After completing all levels, a link to a separate bonus challenge will appear. This is a standalone challenge hosted on a different address. The first person to capture the bonus flag wins the top prize.
No automated tools or scripts
All challenges must be completed manually. Running automated scanners, brute-force tools, or scripts against the platform is not permitted and may result in disqualification.
Do not target production systems
All challenge commands and techniques must be directed only at the designated challenge environment (ctf.pikapack.ai). Never run challenge-related commands, tools, or exploits against any Broadstreet production service, internal network, or live system.