Draft. This code is pending approval by the Securinets INSAT board.
The short version#
Be respectful, be honest, practise legally. Everyone is welcome at Securinets regardless of level, background, gender or school.
At events and in the local#
- Treat members, guests, speakers and staff with respect. Harassment of any kind is not tolerated.
- Ask before photographing people. The Media department keeps consent forms.
- Leave the local as you found it. Shared machines and the internet connection are for learning.
During CTFs#
- Only attack the challenge infrastructure. Never touch other teams, the scoreboard or the platform itself.
- No flag sharing between teams and no brute-forcing the flag submission endpoint.
- Report broken challenges through the official channel (Discord ticket) instead of exploiting them.
Practising#
Only practise on systems you own or have explicit permission to test. This applies to every workshop, resource and challenge we share.
Reporting#
Tell a board member in person, or write to securinets@insat.ucar.tn. Reports are handled confidentially. The board can warn, remove from an event, or revoke membership.