$ ctf42

Pwn CTF challenges

3,926 Pwn CTF challenges from 382 CTFs (2011–2026), 1,025 with writeups.

Top pwn techniques

#stack-buffer-overflow 95 #format-string 88 #rop 76 #use-after-free 56 #ret2win 55 #shellcode 48 #ret2libc 37 #heap 35 #heap-overflow 34 #tcache-poisoning 29 #got-overwrite 29 #stack-pivot 25 #buffer-overflow 23 #heap-exploitation 21 #seccomp 19

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
Appointment_Book
#negative-index
 HeroCTF 2023 – files wu 1
String_Editor_2
#negative-array-index
 ImaginaryCTF 2021 – files wu 1
WhoMovedMyBlock
#nbd#0day#buffer-overflow
 RealWorld 2022 – files wu 1
mooosl
#musl#heap-exploitation
 DEFCON 2021 Quals 80.92 files wu 1
movsh
#mov-only-shellcode
 KITCTFCTF 2022 – files wu 1
Shellcode_verifier
#mmap-page-cache
 Dragon 2021 99.33 files wu 1
Five
#mmap#tiny-shellcode
 TAMUctf 2024 – files wu 1
SecureAssetManager
#mitm-protocol-tampering
 BSidesSF 2021 23.94 files wu 1
color
#missing-null-terminator#adjacent-memory-disclosure
 BuckeyeCTF 2024 50.91 files wu 1
babyrtos
#mips#shellcode-injection#rwx-segment
 3kCTF 2021 24.14 files wu 1
Mipsssh
#mips#rop
 TheCyberJawaraInternational 2024 23.62 files wu 1
do_re_mi
#mimalloc#heap-exploitation
 UIUCTF 2025 – files wu 1
Happy_the_Boss
#memory-editing
 HeroCTF 2021 35.17 files wu 1
sandbox_share
#macos-xpc-exploitation#sandbox-escape
 ALLES 2021 – files wu 1
applepie
#macos-heap-overflow#mach-o-pie
 0CTF 2019 Quals – files wu 1
rainy-redis
#lua-sandbox-escape#oob-write
 BSidesTLV 2021 23.94 files wu 1
lslice
#lua#oob-read#fake-object
 SECCON 2022 Quals 97.90 files wu 1
warmup
#llvm-ir#llvm2c
 BSidesMumbai 2022 24.62 files wu 1
klibrary
#linux-kernel-exploitation#userfaultfd#heap
 3kCTF 2021 24.14 files wu 1
Secure_Storage
#linux-kernel-exploitation#kernel-module-lpe#side-channel-leak
 0CTF 2021 Quals – files wu 1
hop
#libjs#jit-bug#serenityos
 DiceCTF 2024 Quals 54.40 files wu 1
HelloWorldSetup
#libc-leak#canary-overwrite
 SekaiCTF 2022 24.86 files wu 1
Back_to_the_Lab_2
#labview-reversing#vi-block-diagram#network-protocol
 DawgCTF 2021 23.29 files wu 1
trojan_turtles
#kvm-hypervisor#nested-vmx#oob-write
 corCTF 2024 55.00 files wu 1
mykvm
#kvm#shellcode#real-mode
 AzureAssassinAlliance 2022 23.80 files wu 1
fire_of_salvation
#kernel-uaf#msg-msg#cred-overwrite
 corCTF 2021 24.92 files wu 1
stonks-socket
#kernel-uaf
 Hack.lu 2021 94.48 files wu 1
easy_kernel
#kernel-rop
 K3RN3LCTF 2021 24.37 files wu 1
Kqueue
#kernel-heap-overflow
 InCTF 2021 70.41 files wu 1
kernel
#kernel-exploitation#use-after-free (uaf)#userfaultfd#modprobe-path#race-condition
 HITCON 2022 – files wu 1
kSMS_Secure_Message_Storage
#kernel-exploitation#use-after-free (uaf)
 TeamItaly 2023 24.88 files wu 1
krypto
#kernel-exploitation#toctou-race#arbitrary-write#modprobe-path-overwrite#info-leak
 CSAW 2021 Quals 20.54 files wu 1
mov_cr3
#kernel-exploitation#smep-smap
 cr3 2024 23.96 files wu 1
sockcamp
#kernel-exploitation#seccomp-bypass#commit-creds
 CircleCityCon 2021 25.00 files wu 1
throughthewall
#kernel-exploitation#oob-write#pipe-buffer#kernel-rop
 b01lers 2026 66.00 files wu 1
krce
#kernel-exploitation#negative-index#out-of-bounds (oob)
 zer0pts 2022 35.97 files wu 1
Wall_of_Perdition
#kernel-exploitation#msg-msg#cred-overwrite
 corCTF 2021 24.92 files wu 1
h_wix_p
#kernel-exploitation#missing-access-check#arbitrary-read-write#cred-overwrite
 hxp 2025 – files wu 1
menfess
#kernel-exploitation#function-pointer-overwrite#heap-overflow
 COMPFEST 2026 – files wu 1
MTE
#kernel-exploitation#arm-mte#pointer-authentication#use-after-free (uaf)
 SekaiCTF 2026 79.25 files wu 1