TribeCTF @ WM ~ $

The CAGE

$ The CAGE

This year we’re raising the stakes with the CAGE: a sealed, monitored room where you hack with only what we give you. No personal devices, no AI, restricted internet, no shortcuts. Think of it as a SCIF for hackers: you bring the skills, we provide everything else.

A set of challenges, from easy to insane, can only be reached from inside the CAGE. Skip the CAGE and they stay locked.

The CAGE is monitored for the entire event. Any violation of the rules below by any team member disqualifies the entire team.

$ Entering the CAGE

  • Come in empty-handed, or check in at the door. No personal computing or communication devices go inside: laptops, phones, tablets, smartwatches, earbuds, headphones, or USB drives. Hand them to a teammate, or check them in at the CAGE door and we’ll hold them until you’re out. Pen and paper are provided inside.
  • Request, then wait for your invite. Request CAGE time at tribectf.cs.wm.edu/enter-the-cage. First-timers go to the front of the line. Everyone else is served first-come, first-served.
  • One team, one machine. Your whole team is welcome inside, but you get one machine between you. Choose your keyboard wisely.
  • Be on time. If your team doesn’t arrive within 10 minutes of your invite, the slot passes to the next team in line.

$ Time in the CAGE

The CAGE is open from 10:30 AM Saturday to 10:30 AM Sunday.

  • Book in 30-minute blocks. Request 30, 60, 90, or 120 minutes, up to whatever remains of your 2 hours. Once your session starts, the full booking counts against you, even if you leave early.
  • 2 hours per team. Each team gets 2 hours of guaranteed CAGE time across the whole event.
  • Stay while it’s quiet. When your booking ends, keep hacking until another team is waiting. Then you get a 10-minute warning to save to your backup drive and leave. Only booked time counts toward your 2 hours.
  • Out of hours? Teams that have used their 2 hours can still walk in when a station is free. You can stay until another team is waiting.
  • Bathroom breaks are fine. Step out whenever you need to. Your station stays yours until your booking ends, but the clock keeps running.
  • No refunds on bad luck. Lost time from crashes, network outages, or anything else beyond our control isn’t credited back.

$ Your CAGE Machine

  • A clean slate. Every station boots a fresh Kali Linux 2026.2 Live image. Nothing carries over between sessions, whether yours or anyone else’s.
  • Install what you need. You can install tools and use the web as you normally would on a Live boot. Just remember that a Live boot forgets everything when it shuts down.
  • Save to the backup drive, and only the backup drive. Each team gets a USB backup drive. It never leaves the CAGE. We keep it, labeled with your team name, and hand it back at the start of your next session. Pack light.
  • Wiped after the event. All backup drives are erased when TribeCTF ends.
  • Submit flags from inside. The scoreboard is reachable from your CAGE machine.

$ What Happens in the CAGE

  • No AI. AI assistants, chatbots, copilots, and AI-powered features of any tool are off-limits in the CAGE, whether in a browser, a terminal, or an editor plugin. Your brain is the only model allowed in the room.
  • Challenges stay in the CAGE. Challenge files and content must not leave the CAGE machine except to your backup drive. Do not upload, paste, email, message, or transfer them anywhere, including online tools such as decompilers, sandboxes, malware scanners, or solvers. If it’s a CAGE challenge, it gets solved on the CAGE machine.
  • Talk all you want. Teammates inside and outside the CAGE are free to discuss challenges. You just can’t bring the challenges with you.
  • Hands off the infrastructure. Tampering with anything outside the challenges is a violation, including:
    • the machines: firmware/BIOS settings, booting other media, or opening the hardware
    • the network: attacking it, or bypassing its restrictions with VPNs, proxies, tunnels, DNS tricks, or anything similar. Scanning and attacking devices that a challenge points you to is fair game.
    • the backup drives: accessing any drive except your own
    • the room itself
  • The organizers have the final word. Any issues in the CAGE are handled by the Organizing Committee, and its decisions are final. Questions go to @committee on Discord or to any committee member.