7th Sharif University Capture The Flag


  • Account: Each team has a single account. All members of a team should login with the team account. There's no limit on the number of team members.
  • Yard: is the place you can find all you need during the contest.
  • Flag: Unless stated otherwise, all flags have the format SharifCTF{some_chars}. That is, SharifCTF{ and } are parts of the flag.
  • Bonus: The first, second, and third teams which submit the correct flag for some of the challenges will respectively get a bonus score of 20%, 10%, and 5% of the corresponding challenge score.
  • Shared Score: Some challenges have a base score, plus a shared score. Any team which solves such challenges receives the base score in its entirety, as well as a part of the shared score. The latter depends on the number of teams which solve the challenge. Mathematically speaking, the score you receive by solving such challenges is calculated as follows:
    score = base score + (share score/number of teams who solved the challenge)
    Consequently, all the teams who solve these challenges will receive same score. Note that the score might be reduced as other teams solve the challenge.
  • Scoreboard: Scoreboard is where you can see your score, as well as the score of other teams. It is accessible from the yard.
  • Chat: If you have any question, ask it in the chat. Please note that chats are private.
  • News: any changes or any news on the contest will be posted there. Don't forget to check the page periodically.


SharifCTF is intended to provide a warm environment for entertainment and learning. Therefore, any action that undermines our endeavors are unwelcome. This includes, but is not limited to, attacking the contest infrastructure, and cheating during the contest.

Please read the following rules carefully, and abide by them during the contest. Disregarding the rules may result in your team being disqualified.

  • Attacking: Mounting any kind of attack against the SharifCTF infrastructure is forbidden. This includes scanning, DoS, exploiting possible vulnerabilities, sabotage, etc.
    Brute force and denial of service attacks on any challenge will not be tolerated, unless the challenge calls for such an attack.
  • Cheating: Stealing, selling, buying, disclosing, or sharing flags between teams are prohibited. We deployed mechanisms to detect and ban teams involved in such misnorms.
If you find any bugs in our challenges, please report it for possible bonus points.