Skip to content

General exam rules

These rules apply to every certification attempt completed in Spartan-Labs. Each exam’s specific rules may add stricter conditions.

  • Take the exam from your own account.
  • Complete the work and report yourself.
  • Do not share your account, session, credentials or target access.
  • Do not request or accept external assistance during the attempt unless the specific rules expressly allow it.
  • Attack only the targets and addresses assigned by the exam.
  • Do not scan or attack external infrastructure, other students or platform services.
  • Do not use the environment for mining, denial of service, persistence beyond the attempt or unrelated activity.
  • Use only actions available in the interface.

Do not publish, sell, trade or share flags, solutions, targets, addresses, screenshots, recordings, questions, reports or any detail that could reconstruct exam content. This restriction also applies to private groups and direct messages.

The report must be original, reproducible and correspond to the submitted attempt. Manipulating evidence, plagiarizing content or claiming another person’s work violates the integrity of the assessment.

Record the error, time and visible message; take a screenshot without flags or credentials and contact support. An incident does not automatically pause the clock or guarantee an extension.

By starting, you confirm that you have read these rules, the specific rules and the Terms and conditions.