#CTF Welcome to HackerOne's 12 Days of Hacky Holidays! Here are the rules for claiming your prize:

• Send us your write-ups once you have figured out all 12 flags
• Keep an eye out for hints on this page or by following us on Twitter
• Teams are allowed, but prizes are given to 1 person per team

{F1112200}

#Prizes:

• Each flag will get you up to 3 private invites to private programs hosted on HackerOne (Just make sure to submit it on ctf.Hacker101.com)
• Our favorite report will also receive an invite to HackerOne's next live hacking event (being first to submit does no affect this prize)
• $2,000 for the first person to solve all challenges and submit a write up
• $1,000 for the most creative write up
• $1,000 for the first person to submit a 0 or no interaction (automated script) report
• Mistery bonuses ($100-$500)
• All winners will also receive HackerOne swag
• Portswigger's Burp Suite Certified Practitioner Certificaion for up to 25 people

#RULES

• This CTF will end on December 23, 2021, by 2:00 PM Pacific Time
• Please do not release your writeups while the CTF is live, we'll let you know when to disclose your write-up as soon as we can. We promise!
• THIS IS A CTF so please do not send missing best practices, CSRF, or possible CVE related vulnerabilities to this program. Doing so will result in your report getting closed as spam.
• Once the CTF is closed, HackerOne will disclose all submissions.
• Only test against the asset(s) listed within the scope

Exclusions

While hacking, we would like to ask you to refrain from:

• Denial of service
• Spamming
• Social engineering (including phishing) of HackerOne CTF staff or contractors

Safe Harbor

Any activities conducted in a manner consistent with this policy will be considered authorized conduct and we will not initiate legal action against you. If legal action is initiated by a third party against you in connection with activities conducted under this policy, we will take steps to make it known that your actions were conducted in compliance with this policy.

Happy hacking and have a hacky holiday!