contest-rules - 2023 Square Capture the Flag rules.
The event starts on November 17 18:00 UTC and ends on November 18 18:00 UTC.
Puzzles will be available for future download. Points will not be awarded for solving them after the event ends.
All puzzles are solvable without brute forcing the solutions.
You know you have successfully solved a puzzle if you find a string which matches the following
regular expression:
/flag\{.*\}/i.
For instance, flag{27fbe50bf1ccdaf5cfc9a1} would be a valid flag.
Each puzzle will be released at a specific time (spread over 24 hours).
Puzzles are mostly independent and can be solved in any order.
All puzzles have been verified to be solvable. Most puzzles should be solvable on a variety of operating system / browser / virtualization software combinations.
The organizers will contact the winners to organize prize delivery using the email registered for the team account.
Only competitors who are residents of the USA are eligible for prizes this year.
If any of the top 3 teams are ineligible for prizes, the next eligible highest placed team will receive the prize.
If there is a tie, the first team to have scored their last point, based on the organizers' records, wins the tie.
Decision of the organizers will be final and binding with regard to the prizes.
One-person teams are allowed, but it's more fun with friends! There is no limit on team size.
Providing an email is optional. The email is only used for account recovery purpose and as a means of contact for prize coordination.
All data related to the event will be deleted shortly after the event ends. Your email will not be associated with any other Square services.
*.squarectf.com does not use any tracking technology. Cookies may be used for the purpose of authentication and content delivery (CloudFlare CDN) purpose.
Your team name and score will be made available in a public fashion and shared with ctftime.org. Points scored in this event should count towards your global CTF Time leaderboard.
This website (and anything hosted under *.squarectf.com) is not included in Square's Bugcrowd bug bounty programs. Please visit the official Bugcrowd site for additional information about Square's bug bounty programs.
The challenges posted on this site may be hacked using any tools desired. However, hacking of any Square infrastructure, which is separate infrastructure from this site, falls under the terms of Square's Bugcrowd bug bounty program. In addition, Slack has their own terms of service for appropriate use. When in doubt, contact a CTF organizer to determine whether a site or server is within the CTF scope.
The CTF is running on infrastructure hosted by other companies. Please be kind and limit traffic to a reasonable level. All puzzles are solvable without brute forcing the solutions.
By participating in this Contest you agree to abide by the Square CTF Code of Conduct. Unacceptable behavior by participants will not be tolerated. Anyone asked to stop unacceptable behavior is expected to comply immediately. If a participant engages in unacceptable behavior, the Square CTF organizers may take any action they deem appropriate at their sole discretion, up to and including expulsion from the Competition and expulsion from the Square CTF Slack.
Work_at_Block(1), Privacy_policy(1), Code_of_conduct(1)