Pwn CTF challenges

3,922 Pwn CTF challenges from 381 CTFs (2011–2026), 669 with writeups.

Top pwn techniques

Challenges

Filter and sort these in the challenge browser →

Challenge	CTF	Weight	Has
Magic_trick #write-what-where #got-overwrite	DCTF 2021	–	files wu 3
write_what_where #write-what-where	DownUnderCTF 2021	–	files wu 3
deadcode #variable-overwrite	DownUnderCTF 2021	–	files wu 3
tinyfs #use-after-free (uaf)#arbitrary-write	TSG 2023	–	files wu 3
staff #uninitialized-memory #stack-leak	BuckeyeCTF 2021	24.81	files wu 3
external #syscall-rop #got-overwrite	0x41414141 2021	–	files wu 3
Unintended #strlen-overflow #heap-overflow #tcache	RaRCTF 2021	24.53	files wu 3
ready_bounce_pwn #stack-pivot	DownUnderCTF 2021	–	files wu 3
Chainblock #stack-overflow #rop #gets	corCTF 2021	24.92	files wu 3
stackoverflow #stack-overflow	ImaginaryCTF 2021	–	files wu 3
Pinch_me #stack-buffer-overflow #variable-overwrite	DCTF 2021	–	files wu 3
Alien_Math #stack-buffer-overflow #uninitialized-rand #ret2win	CSAW 2021 Quals	20.54	files src wu 3
magic-marker #stack-buffer-overflow #struct-overwrite #ret2win	DamCTF 2021	24.43	files wu 3
Kanagawa #stack-buffer-overflow #ret2win #no-aslr	DaVinciCTF 2021	24.50	files wu 3
Pwn_sanity_check #stack-buffer-overflow #ret2win	DCTF 2021	–	files wu 3
ret2winRaRs #stack-buffer-overflow #ret2win	RaRCTF 2021	24.53	files wu 3
Hotel_ROP #stack-buffer-overflow #ret2libc #pie	DCTF 2021	–	files wu 3
Baby_bof #stack-buffer-overflow #ret2libc #got-leak	DCTF 2021	–	files wu 3
Password_Checker #stack-buffer-overflow #password-check-bypass	CSAW 2021 Quals	20.54	files src wu 3
bop #stack-buffer-overflow #gets #seccomp #orw #rop	DiceCTF 2023	36.70	files wu 3
Bofit #stack-buffer-overflow #gets #ret2win	DawgCTF 2021	23.29	files wu 3
echo #srop #sigreturn-oriented-programming	0x41414141 2021	–	files wu 3
moving-signals #srop #buffer-overflow	0x41414141 2021	–	files wu 3
ASM #srop	n00bzCTF 2023	15.12	files wu 3
SomeReallyOrdinaryProgram #srop	NahamCon 2021	24.98	files wu 3
Outfoxed #spidermonkey-exploitation #browser-pwn	corCTF 2021	24.92	files wu 3
odd_shell #shellcode #restricted-charset	UIUCTF 2022	–	files src wu 3
sloader #shellcode #arbitrary-write	TSG 2023	–	files wu 3
nasm_kit #sandbox-escape #shellcode #map-fixed #aslr-bypass	zer0pts 2021	24.56	files wu 3
hackatris #rop-ret2libc	LINE 2023	–	files wu 3
babyrop #rop #ret2csu #stack-buffer-overflow	DiceCTF 2021	24.82	files wu 3
Tiny_Tim #rop #mprotect-shellcode	BlueHens 2021	22.62	files wu 3
Open_Sesame #ret2win	NahamCon 2023	34.82	files wu 3
Babiersteps #ret2win	NahamCon 2022	24.61	files wu 3
Ret2basic #ret2win	NahamCon 2021	24.98	files wu 3
TheList #ret2win	NahamCon 2021	24.98	files wu 3
outBackdoor #ret2win	DownUnderCTF 2021	–	files wu 3
Babysteps #ret2dlresolve	NahamCon 2022	24.61	files wu 3
wayyang #python-eval-injection #filter-bypass	SEETF 2022	–	files wu 3
sandybox #ptrace-sandbox-escape #shellcode	PlaidCTF 2020	93.15	files wu 3