Pwn CTF challenges

3,922 Pwn CTF challenges from 381 CTFs (2011–2026), 669 with writeups.

Top pwn techniques

Challenges

Filter and sort these in the challenge browser →

Challenge	CTF	Weight	Has
BabyHeap #off-by-one #double-free #fastbin-dup #malloc-hook-overwrite	0CTF 2018 Quals	–	files wu 1
CoRJail #off-by-null #kernel-uaf #container-escape	corCTF 2022	24.92	files wu 1
Rudimentary_Calculator #null-byte-stack-leak	L3akCTF 2026	34.47	files wu 1
BabyHeap #null-byte-off-by-one #heap-overlap #tcache	0CTF 2019 Quals	–	files wu 1
back_to_the_future #netscape #sscanf-stack-overflow #browser-exploitation	PlaidCTF 2020	93.15	files wu 1
encryptinator #negative-index #stack-oob	TAMUctf 2023	–	files wu 1
Game_CET_Match #negative-index #got-overwrite #rop	WolvCTF 2024	35.25	files wu 1
Appointment_Book #negative-index	HeroCTF 2023	–	files wu 1
String_Editor_2 #negative-array-index	ImaginaryCTF 2021	–	files wu 1
movsh #mov-only-shellcode	KITCTFCTF 2022	–	files wu 1
Shellcode_verifier #mmap-page-cache	Dragon 2021	99.33	files wu 1
SecureAssetManager #mitm-protocol-tampering	BSidesSF 2021	23.94	files wu 1
color #missing-null-terminator #adjacent-memory-disclosure	BuckeyeCTF 2024	50.91	files wu 1
babyrtos #mips #shellcode-injection #rwx-segment	3kCTF 2021	24.14	files wu 1
do_re_mi #mimalloc #heap-exploitation	UIUCTF 2025	–	files wu 1
Happy_the_Boss #memory-editing	HeroCTF 2021	35.17	files wu 1
sandbox_share #macos-xpc-exploitation #sandbox-escape	ALLES 2021	–	files wu 1
applepie #macos-heap-overflow #mach-o-pie	0CTF 2019 Quals	–	files wu 1
rainy-redis #lua-sandbox-escape #oob-write	BSidesTLV 2021	23.94	files wu 1
klibrary #linux-kernel-exploitation #userfaultfd #heap	3kCTF 2021	24.14	files wu 1
Secure_Storage #linux-kernel-exploitation #kernel-module-lpe #side-channel-leak	0CTF 2021 Quals	–	files wu 1
Back_to_the_Lab_2 #labview-reversing #vi-block-diagram #network-protocol	DawgCTF 2021	23.29	files wu 1
trojan_turtles #kvm-hypervisor #nested-vmx #oob-write	corCTF 2024	55.00	files wu 1
fire_of_salvation #kernel-uaf #msg-msg #cred-overwrite	corCTF 2021	24.92	files wu 1
stonks-socket #kernel-uaf	Hack.lu 2021	94.48	files wu 1
easy_kernel #kernel-rop	K3RN3LCTF 2021	24.37	files wu 1
Kqueue #kernel-heap-overflow	InCTF 2021	70.41	files wu 1
kSMS_Secure_Message_Storage #kernel-exploitation #use-after-free (uaf)	TeamItaly 2023	24.88	files wu 1
krce #kernel-exploitation #negative-index #out-of-bounds (oob)	zer0pts 2022	35.97	files wu 1
krwd #kernel-exploitation	TRX 2026	–	files wu 1
Bloat #kernel-exploitation	UTCTF 2022	–	files wu 1
krypto #kernel-exploit #toctou-race #arbitrary-write #modprobe-path-overwrite #infoleak	CSAW 2021 Quals	20.54	files wu 1
Wall_of_Perdition #kernel-exploit #msg-msg #cred-overwrite	corCTF 2021	24.92	files wu 1
welkerme #kernel-exploit #arbitrary-function-call #ret2usr	CakeCTF 2022	–	files wu 1
hangbuzz101 #kernel-dos #net-scheduler #qdisc	corCTF 2025	82.00	files wu 1
baby_guess #kernel-canary-leak	N1CTF 2021	53.54	files wu 1
hashbrown #kernel #race-condition #use-after-free (uaf)#fg-kaslr-bypass	DiceCTF 2021	24.82	files wu 1
oboe #kernel #heap-overflow #off-by-one #use-after-free (uaf)#rop #commit-creds #kpti-bypass	DiceCTF 2025 Quals	81.00	files wu 1
Ancient_Monkey #js-engine	Hack.lu 2024	100.00	files wu 1
setjmp #jmpbuf-hijack	HITCON 2024 Quals	100.00	files wu 1