GCTF://AI-POLICY

AI Policy

We will not ban AI. You choose how you compete. Register on the matching bracket and stay there. Details appear after you pick.

Click Human, Humanoid, or Cyborg to read that policy.

Human

Classic CTF. Instinct, notes, and hands on the keyboard. You compete against other Human teams.

Allowed

  • Search engines, man pages, and docs.
  • Using AI only as a lookup for syntax, flags, or arguments of a tool you already know.

Prohibited

  • Feeding challenge files, descriptions, or remotes to any AI.
  • LLMs, agents, Codex, Claude Code, Cursor agents, or similar.
  • Asking a model for solving ideas, hints, or code.
  • Writing challenge code with AI. Building custom AI/ML solvers.

Enforcement

A Human team using self-built AI tooling is moved to Humanoid. A Human team using LLMs, agents, or Codex is moved to Cyborg. Repeat or blatant abuse can mean disqualification.

Humanoid

Human plus AI — but you stay in the loop. Every exploit, script, and payload is built by you. No unattended runs.

Allowed

  • Everything a Human may do.
  • AI-related tooling you wrote yourself: classifiers, fuzzers, solvers, local models you trained.
  • You type the commands. You read the output. You decide the next step.

Prohibited

  • Hosted LLMs such as ChatGPT, Claude, Kimi, Gemini, and similar.
  • Agents and coding agents: Codex, Claude Code, Cursor agents, OpenHands, and similar.
  • Letting a model write the exploit or talk to a challenge remote.
  • Unattended automation — pipelines that keep going while you are away.

Enforcement

A Humanoid team using LLMs, agents, Codex, or unattended pipelines is moved to Cyborg. Repeat or blatant abuse can mean disqualification.

Cyborg

Full AI. Agents, Codex, hosted models, autonomous pipelines — anything related is in scope.

Allowed

  • LLMs, agents, Codex, Claude Code, Cursor agents, and similar.
  • Feeding challenge materials to models.
  • Tools that talk to challenge remotes on your behalf.

Still required

  • Follow the main Rules: no attacking infrastructure, no flag sharing outside your team, no disrupting other players.

Enforcement

Cyborgs stay on the Cyborg leaderboard. Breaking the main Rules can still mean disqualification.