$ ctf42

Pwn CTF challenges

3,926 Pwn CTF challenges from 382 CTFs (2011–2026), 1,025 with writeups.

Top pwn techniques

#stack-buffer-overflow 95 #format-string 88 #rop 76 #use-after-free 56 #ret2win 55 #shellcode 48 #ret2libc 37 #heap 35 #heap-overflow 34 #tcache-poisoning 29 #got-overwrite 29 #stack-pivot 25 #buffer-overflow 23 #heap-exploitation 21 #seccomp 19

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
runway3
#format-string-leak#canary-bypass#ret2win
 BuckeyeCTF 2024 50.91 files wu 1
Simple_Format
#format-string-leak
 MetaCTF 2021 – files wu 1
rickroll
#format-string-got-overwrite
 LA 2023 – files wu 1
Sentence_To_Hell
#format-string#write-what-where#got-overwrite
 DanteCTF 2023 24.44 files wu 1
Format 1
#format-string#variable-overwrite
 angstromCTF 2016 – files src wu 1
format_string
#format-string#uninitialized-leak
 corCTF 2024 55.00 files wu 1
simple_echoserver
#format-string#stack-pointer-chaining
 0CTF 2020 Quals – files wu 1
SearchEngine
#format-string#stack-leak
 1337UP 2022 22.49 files wu 1
DESTRUCTINATOR
#format-string#stack-leak
 DeconstruCT.F 2021 19.69 files wu 1
printf-please
#format-string#stack-leak
 redpwn 2021 32.61 files wu 1
Number_Guess
#format-string#stack-leak
 angstromCTF 2018 – files wu 1
uncurved
#format-string#seccomp#orw
 DigitalOverdose 2021 – files wu 1
bench_225
#format-string#rop#pie-leak
 UMassCTF 2024 43.10 files wu 1
All
#format-string#rop
 BYUCTF 2024 – files wu 1
ForMatt_Zelinsky
#format-string#rop
 BlueHens 2021 22.62 files wu 1
my_little_pwnie
#format-string#return-address-overwrite#one-gadget
 OMH 2021 – files wu 1
imgstore
#format-string#ret2libc
 ImaginaryCTF 2024 49.81 files wu 1
Baby_Formatter
#format-string#restricted-specifiers
 BackdoorCTF 2023 – files wu 1
Flag_Shop
#format-string#privilege-escalation
 SunshineCTF 2024 38.57 files wu 1
MathGame
#format-string#printf-arithmetic
 0CTF 2018 Quals – files wu 1
Helldivers
#format-string#pie-leak#ret2win
 SpaceHeroes 2024 24.50 files wu 1
Rift
#format-string#non-stack-buffer
 TAMUctf 2024 – files wu 1
Format_muscle
#format-string#musl
 CrewCTF 2024 26.89 files wu 1
Easiest Printf
#format-string#malloc-hook-overwrite#one-gadget
 0CTF 2017 Quals 40.74 files wu 1
Brick_City_Office_Space
#format-string#got-overwrite#ret2libc
 UMassCTF 2026 65.95 files wu 1
WTML
#format-string#got-overwrite#one-gadget
 WolvCTF 2023 24.33 files wu 1
fmtstr
#format-string#got-overwrite#libc-leak
 PBjar 2021 23.18 files wu 1
Jump_Is_Found
#format-string#got-overwrite#heap
 UMDCTF 2021 – files wu 1
SaveMe
#format-string#got-overwrite#egg-hunt
 SekaiCTF 2022 24.86 files wu 1
SmolOverflow
#format-string#got-overwrite#bof
 UTCTF 2022 – files wu 1
logbook
#format-string#got-overwrite
 CyberSecurityRumble 2023 Quals 24.80 files wu 1
printshop
#format-string#got-overwrite
 PatriotCTF 2023 24.52 files src wu 1
LIBrary_in_C
#format-string#got-overwrite
 angstromCTF 2020 – files wu 1
Returns
#format-string#got-overwrite
 angstromCTF 2019 – files wu 1
GuessingGame2
#format-string#got-leak#ret2libc
 picoCTF 2020 – files wu 1
pokemonbattle
#format-string#function-pointer-overwrite
 SEETF 2022 – files wu 1
echo_chamber
#format-string#filter-bypass
 cr3 2024 23.96 files wu 1
gambler_supreme
#format-string#canary-leak#buffer-overflow
 b01lers 2022 33.05 files wu 1
Canaleak
#format-string#canary-leak
 WaniCTF 2023 24.99 files wu 1
Tweety_Birb
#format-string#canary-leak
 KillerQueen 2021 21.14 files wu 1