Pwn CTF challenges

3,922 Pwn CTF challenges from 381 CTFs (2011–2026), 669 with writeups.

Top pwn techniques

Challenges

Filter and sort these in the challenge browser →

Challenge	CTF	Weight	Has
BabyStack #ret2dlresolve #stack-buffer-overflow #rop	0CTF 2018 Quals	–	files wu 1
Jump_Is_Easy #ret2dlresolve #bof #x86-64	UMDCTF 2021	–	files wu 1
Jump_Not_Working #ret2dlresolve #bof	UMDCTF 2021	–	files wu 1
Resolve #ret2dlresolve	UTCTF 2021	–	files wu 1
kasu_bof #ret2dlresolve	SECCON 2021	–	files wu 1
eeeeeemoji #restricted-shellcode #unicode-constraint #one-gadget	0CTF 2020 Quals	–	files wu 1
searching_through_vines #restricted-shell-escape	JerseyCTF 2024	21.26	files wu 1
pcpu #race-condition #vm	Codegate 2023 Quals	–	files wu 1
KrampusGifts #race-condition #tcache #heap-exploitation #multithreading	X-MAS 2022	–	files wu 1
Full_Chain_Wall_Maria #qemu-escape	HITCON 2023 Quals	99.75	files wu 1
q3vm #q3vm-oob	justCTF 2024 Quals	77.17	files wu 1
seccon_tree #python-sandbox-escape #c-extension	SECCON 2021	–	files wu 1
finance_calculat0r_2021 #python-sandbox #function-whitelist-bypass #import-alias	CyberSecurityRumble 2021	41.60	files wu 1
Banking_Issues #python-negative-index #access-control-bypass	BxMCTF 2023	–	files wu 1
balloon #python-jail-escape #chroot-sandbox	Aero 2022	51.22	files wu 1
ordersystem #python-bytecode	Hack.lu 2022	93.70	files wu 1
Snaking_Revenge #pyjnius #type-confusion #jni	SAS 2026 Quals	31.00	files wu 1
RepusPing #ptr-guard-key-recovery	MntcrlCTF 2026	25.00	files wu 1
lucky #prng-seed-bruteforce	TAMUctf 2022	–	files wu 1
gambler_baby #predictable-prng #weak-seeding #binary-patching	b01lers 2022	33.05	files wu 1
suboptimal_pwning #pointer-guard-bypass	hxp 2024	–	files wu 1
ctfhub2 #php-ffi-oob	N1CTF 2021	53.54	files wu 1
messenger #page-level-uaf	LA 2025	–	files wu 1
trusty_user_diary #page-cache	hxp 2021	99.41	files wu 1
plang #out-of-bounds-write #heap-overlap #tcache-poisoning #malloc-hook-overwrite	0CTF 2019 Quals	–	files wu 1
safe_vector #out-of-bounds (oob)#negative-index #tcache-poisoning #cpp	zer0pts 2021	24.56	files wu 1
Adventure_On_the_High_C #out-of-bounds (oob)#arbitrary-read-write	SunshineCTF 2024	38.57	files wu 1
Trust_Issues #op-tee #trustlet #brainfuck-interpreter #oob-read	SAS 2025 Quals	20.72	files wu 1
AuViel #oob-write	Hayyim 2022	25.00	files wu 1
Liars_and_Cheats #oob-read #srand-seed-leak #environ-leak #stack-buffer-overflow	PlaidCTF 2021	99.64	files wu 1
BitmapManager #oob-read	Dragon 2020	98.00	files wu 1
String_Editor_1 #oob-index-write	ImaginaryCTF 2021	–	files wu 1
pcg #oob-index #stack-buffer-overflow #ret2libc #custom-image-parser	pingCTF 2022	24.29	files wu 1
book #oob-index #arbitrary-read-write #got-overwrite #ret2libc	Defcamp 2023 Quals	–	files wu 1
porcosort #off-by-one-stack-overflow	LakeCTF 2022 Quals	23.96	files wu 1
EmptyRead #off-by-one-null-byte	NahamCon 2021	24.98	files wu 1
limit #off-by-one #tcache-poisoning #overlapping-chunks	smileyCTF 2025	48.61	files wu 1
Cake #off-by-one #rbp-lsb-overwrite #stack-pivot #shellcode	1337UP 2022	22.49	files wu 1
duet #off-by-one #largebin-attack #fastbin-attack #fsop #setcontext	0CTF 2020 Quals	–	files wu 1
Refreshments #off-by-one #fastbin-attack #unsorted-bin	StackSmash 2025	24.00	files wu 1