Faq

Everything you need to know about this competition.

Support

Help Center

Here are some common questions and answers about the CTF.

This is a cybersecurity competition structured in a "Jeopardy" format, where participating teams solve challenges related to various aspects of information security to accumulate points.

The competition consists of two rounds:
- Online Qualification Round: Takes place online for 24 continuous hours on August 23, 2025.
- Final Onsite Round: Held live in Da Nang on September 20, 2025, lasting 08 hours.

Participants can only join as a team. Each team must consist maximum of 04 members to be eligible.

Recommended skills include: Web security, reverse engineering, cryptography, binary exploitation (pwn), OSINT, AI exploitation, cloud hacking, and forensics. Challenges are designed with varying difficulty levels (easy, medium, hard), suitable for both beginners and experienced participants.

Participants are required to have a personal computer with a stable internet connection, VPN, and SSH support. Additionally, installing specialized tools such as Ghidra, Burp Suite, pwntools, etc., may be beneficial during the competition.

Yes. Throughout the competition, the support team will be available to answer questions and provide technical assistance via the official Discord channel, with a guaranteed response within 30 minutes.

The leaderboard and competition updates will be regularly posted on the official website. You can access your personal dashboard after completing registration to monitor your progress.

  1. Scoring Method:
    Each challenge in the competition is evaluated based on its difficulty and completion status. More difficult challenges will yield higher points. When a team successfully solves a challenge and captures the ""flag,"" they will receive points corresponding to the challenge's difficulty.

  2. Determining the Winning Team:
    The winning team will be the team that achieves the highest total score at the end of the competition period. In the event of a tie in points between multiple teams, additional tie-breaker criteria (if any) will be applied to determine the ranking.
Tie-breaker Criteria (if applicable):
- Time to Solve: If multiple teams have the same score, the team with the shortest total time taken to solve the challenges will be ranked higher.

  1. Identification of Fraudulent or Dishonest Behavior:
    The following behaviors are considered fraudulent or dishonest, including but not limited to:
    Technical Fraud:
    Using automated tools (scripts, bots) to solve competition problems; attacking or infiltrating the Organizing Committee's (OC) system or another participant's system to steal information or flags.
    Plagiarism/Copying Answers:
    Copying or extensively reusing solution content from external sources rather than relying on personal skills.
    Other Dishonest Behaviors:
    Intentionally slowing down the system or causing disruptions (e.g., DDoS, spam) to gain an unfair advantage; creating multiple accounts or using other tactics to manipulate scores.

  2. How to Report Fraud:
    To report fraudulent behavior, participants must provide the following information:
    Detailed Description: Clearly describe the fraudulent behavior observed, including the name of the violating participant/team, the cheating methods used (scripts, plagiarism, attacks, etc.), and specific evidence.
    Supporting Evidence: Attach specific evidence such as system logs, screenshots of attacks or signs of cheating, or preliminary investigation results (if available).
    Time and Location: Provide details about when the fraudulent behavior was detected and the specific context.
    Reporting Channel: Submit the report via the competition's official support channel (e.g., Discord) for prompt handling by administrators and the Organizing Committee.

  3. Handling and Resolution of Fraud Reports:
    Investigation: The Organizing Committee will conduct an investigation, review reports, and verify the evidence provided.
    Decision on Action: Depending on the severity of the fraudulent behavior, the Organizing Committee may take actions such as:
    Warning the violating participant/team.
    Temporarily suspending or permanently disqualifying the participant/team from the competition.
    Banning the participant from future CTF competitions organized by this Organizing Committee.
    Announcement of Outcome: The Organizing Committee will inform the relevant parties of the action taken to ensure transparency.
Note: The Organizing Committee reserves the right to reject a complaint if the required information in the report is not fully provided.

  1. Verifying the Validity of Errors/Flags:
    Before reporting, participants must thoroughly check to ensure that the flag found is valid (correct format, not a system error) and not caused by the competition environment. If the flag is invalid, do not report it immediately; instead, attempt it again or refer to the competition's guide materials before reporting.

  2. Assessing System Error Cases:
    If participants suspect an error is due to the system (e.g., not recognizing a valid flag, loss of server connection, website failing to load, etc.), they should check if the issue affects all other participants. If a system error is confirmed, participants must report it promptly so the Organizing Committee can address it.

  3. Submitting Error/Flag Reports:
    The report must include the following information:
    Detailed Description: Clearly describe the flag or error encountered, including how the flag was found, steps taken, and unexpected results.
    Competition Environment Information: Specify the competition environment (e.g., web app, software, network environment) and any relevant technical settings (if needed).
    Supporting Evidence: Attach screenshots, videos, or other important notes (e.g., error messages from the server, incorrect flag code, or code snippets showing an erroneous flag).
    Flag Found (if applicable): Submit the flag found and provide additional information about related errors if the flag is invalid.
    Reporting Channel: Report via the competition's official support channels (e.g., specific Discord account).

  4. Feedback and Resolution:
    Processing: The Organizing Committee will verify the issue and may request further information if necessary.
    Solution: If the error is confirmed to be valid and requires correction (e.g., a system error or an incorrect flag), the Organizing Committee will notify participants of the fix and provide updates.
    Flag Update (if needed): In cases where the flag was incorrect due to a system error, the participant will receive the correct flag and can continue the competition.

If you can’t find the answer that you are looking for, please ask one of our friendly staffs in our Discord for more information.

Our Sponsors and Partners

We are honored to work together with prominent organizations and institutions in the cybersecurity industry.

agest Argibank BA NA Hills BIDV
Endorsed By
NCA ORG

Are you ready to participate in a game of Capture the Flag?

Sign up for the Digital Dragons: The Cybersecurity Competition 2025 and step into the world of cybersecurity.