SCOPE / LAB RULES

Stay curious.
Stay in scope.

CL Labs is a shared environment for learning. A good challenge gives you room to explore and a clear boundary.

1. 01 /

   Attack only the listed targets

   Use the target addresses and services explicitly included in your event brief. The website, VPN infrastructure, management systems, other players, and unrelated internet systems are outside scope.

2. 02 /

   Keep the lab usable

   Avoid denial-of-service attacks, uncontrolled scanning outside the target scope, and destructive actions unless a challenge explicitly permits them.

3. 03 /

   Keep your access personal

   Do not share passwords, VPN configurations, or another player's flags. Follow the collaboration rules stated for each event.

4. 04 /

   Report unexpected access

   If you reach a system outside the event scope, stop and tell the event organiser. Do not explore or retain unrelated data.