Equipment

Participants should come with:
  • A computer and its power cord, including power adapters if necessary
  • A variety of USB cables, including USB to Micro USB cable and USB to USB-C cable
  • A multiplug outlet
  • Wifi dongle (if not supported by laptop)
Highly recommended in the team:
  • A smartphone
  • Bluetooth dongle (if not supported by your laptop)
  • Bus Pirate, Hydrabus, CH341
  • Soldering iron, flux, microscope, hot air station
  • UART to USB
  • 6 AA batteries
  • Gardening gloves
We may be able to lend some equipment above, but it's better to bring your own. Participants are free to use any software or equipment of their choice (e.g. disassembler, Kali, virtual machines, SD card, proxmark...) provided it does not damage the target (see rules section below). Ask organizers if you are in doubt.

Rules

  • Competitors have to be physically present
  • Maximum number of 5 participants per team
  • During Ph0wn, for some specific challenges, participant may borrow equipment and smart devices. This equipment/device should be handled with care and returned in perfect working condition. In all cases, return promptly the item at the end of the CTF please (sometimes, it's our own, and it costs us!). Please discuss with the organizers if you have any question on what is permitted or not.
  • To compete with existing conference badges, you will need to modify your badge. Changes can include hardware upgrades, new extensions, or customized firmware, etc. more info on that here: Badge contest
Participants must comply to the Code of Conduct. In particular, note it is strictly prohibited and subject to disqualification to:
  • Attack any machine other than the designated ones,
  • DoS Ph0wn CTF infrastructure or University,
  • Modify the scoreboard,
  • Intentionally prevent other teams from flagging.

Prize Attribution

This is a short explanation of how prizes are attributed.

At the end of the CTF, on Ph0wn's CTF scoreboard, the 3 teams with the highest score are identified and are entitled to a prize. In case the score is equal, the first team to reach the score is considered as first.
  • The first team is called to select 5 prizes among a pool of available prizes.
  • Then, the second team is called to select 5 prizes among the remaining prizes.
  • Finally, the third team is called to select 5 prizes among the remaining prizes.
  • If a team has less than 5 members, they still select 5 prizes :)

Prizes at Ph0wn are provided by our sponsors. Many thanks to them!
In case of insufficient prizes, those rules are subject to change.

Code of Conduct

We expect all participants, sponsors, partners, friends, visitors and the Ph0wn staff to know and follow this Code of Conduct. These rules apply to the Ph0wn conference, CTF, workshops venues and related social events. If a participant does not respect this code of conduct, the Ph0wn staff may take any action they deem appropriate. This includes a warning, expulsion from the event with no refund (if applicable), or reporting their behavior to the local law enforcement.

Expected behaviors

Expected behavior of attendees include, but is not limited to, the following:
  • Treat others with respect and dignity;
  • Treat them fairly and without unfair or illegal discrimination;
  • Do not offend others with foul language, anti-social behavior or discriminatory behavior;
  • Treat the environment with respect. Do not use, misplace books in the library;
  • Do not interfere with other people enjoyment of the facilities or activities;
  • Do not engage in activity or behavior likely to bring the Ph0wn organization into disrepute;
  • Comply with the reasonable requests of the Ph0wn staff;
  • Respect the confidentiality of others;
  • Use the Ph0wn event resources responsibly and honestly;
  • Do not act dishonestly or with intent to commit fraud;
  • Do not attack any other machine/device that ones specifically designated for the CTF;
  • Do not intentionally prevent other teams from flagging;
  • Do not attack the CTF scoreboard;
  • Return Ph0wn equipment you borrow as soon as possible, or at most, before the end of the event.

Anti-harassment

Participants asked to stop any harassing behavior are expected to comply immediately. Harassment includes offensive verbal comments related to gender, gender identity and expression, age, sexual orientation, disability, physical appearance, body size, race, ethnicity, nationality, or religion, sexual images in public spaces, deliberate intimidation, stalking, following, photography or audio/video recording against reasonable consent, sustained disruption of workshops, challenges or other events, inappropriate physical contact, and unwelcome sexual attention.

As this is a security challenge, we would like to note that the hacks created during the Capture the Flag contest or the badges submitted to the Badge Contest are equally subject to the anti-harassment policy.

Sponsors, partners and authorized visitors are also subject to the anti-harassment policy. In particular, sponsors should not use sexualized images, activities, or other material. Sponsor representatives (including volunteers) should not use sexualized clothing/uniforms/costumes, or otherwise, create a sexualized environment. If you are being harassed or if you notice that someone else is being harassed, or have any other concerns, please contact any member of Ph0wn staff immediately. Ph0wn staff will be willing to help participants contact any local security or local law enforcement, provide escorts, or otherwise assist those experiencing harassment to feel safe for the duration of the event. We value your attendance.

Photography and video

Pictures or videos of individuals or small groups are forbidden without explicit permission. Screenshots of participant's laptops are also forbidden without explicit permission.

Pictures or videos of challenges or badges are welcome and authorized.

Some challenges or badges may use a camera. The camera will be clearly visible and identifiable. We expect people who do not want to be filmed not to walk in front of the camera, otherwise, it may be interpreted as an informal acknowledgment.