$ ctf42

Pwn CTF challenges

3,926 Pwn CTF challenges from 382 CTFs (2011–2026), 1,025 with writeups.

Top pwn techniques

#stack-buffer-overflow 95 #format-string 88 #rop 76 #use-after-free 56 #ret2win 55 #shellcode 48 #ret2libc 37 #heap 35 #heap-overflow 34 #tcache-poisoning 29 #got-overwrite 29 #stack-pivot 25 #buffer-overflow 23 #heap-exploitation 21 #seccomp 19

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
Canary
#format-string#canary-bypass#stack-buffer-overflow
 angstromCTF 2020 – files wu 1
system_write
#format-string#buffer-overflow#got-overwrite
 Defcamp 2023 Quals – files wu 1
files
#format-string#buffer-overflow
 BSidesSF 2023 35.00 files wu 1
stiller_printf
#format-string#blind-format-string
 LexingtonInformaticsTournament 2023 33.53 files wu 1
system_leak
#format-string#arbitrary-read#libc-leak
 Defcamp 2023 Quals – files wu 1
format_string_read
#format-string#arbitrary-read
 AccessDenied 2022 23.75 files wu 1
Floormat_Mega_Sale
#format-string
 1337UP 2024 – files wu 1
bearsay
#format-string
 AmateursCTF 2024 24.54 files wu 1
NoRegVM
#format-string
 m0leCon 2023 Quals 53.62 files wu 1
cat
#format-string
 HSCTF 2023 – files wu 1
form
#format-string
 ImaginaryCTF 2023 34.52 files wu 1
ARMsinthe
#format-string
 Hackappatoi 2022 24.71 files wu 1
WayTooSimple
#format-string
 LakeCTF 2022 Quals 23.96 files wu 1
printf
#format-string
 MapleCTF 2022 24.05 files wu 1
Note_Server
#format-string
 MetaRed 2021 – files wu 1
Security_Code
#format-string
 TMUCTF 2021 – files wu 1
Simple_Format_Returned
#format-string
 MetaCTF 2021 – files wu 1
Yet_Another_Login
#format-string
 m0leCon 2021 Quals 24.55 files wu 1
baby-sum
#format-string
 IJCTF 2021 – files wu 1
vanity_check_i
#format-string
 idekCTF 2021 24.56 files wu 1
still-printf
#format-string
 hxp 2020 94.00 files wu 1
Purchases
#format-string
 angstromCTF 2019 – files wu 1
PostOffice
#forensics#telegram-api
 DaVinciCTF 2021 24.50 files wu 1
File-V
#file-structure-exploitation#shellcode
 Codegate 2022 Quals – files wu 1
chonccfile
#file-stream-exploitation#fsop
 L3akCTF 2024 24.43 files wu 1
kernel-rop
#fg-kaslr-bypass
 hxp 2020 94.00 files wu 1
ChessFEN
#fen-parser#out-of-bounds (oob)
 SunshineCTF 2022 24.10 files wu 1
Dragonbox
#fd-hijack
 Dragon 2021 99.33 files wu 1
Bosh
#fault-injection-oracle
 L3akCTF 2026 34.47 files wu 1
Fake_Canary
#fake-canary#stack-buffer-overflow
 ImaginaryCTF 2021 – files wu 1
its_just_a_dos_bug_bro
#entrybleed#spectre-v1#side-channel
 corCTF 2024 55.00 files wu 1
Endian of the World
#endianness
 angstromCTF 2016 – files src wu 1
flag
#embedded#arm#freertos#goahead
 RealWorld 2022 – files wu 1
ELFcrafting-v1
#elf-format-crafting#pwn
 AmateursCTF 2023 24.54 files wu 1
BountyHunter
#egg-hunter#shellcode
 IRON 2024 – files wu 1
eBPF
#ebpf#verifier-bypass#kernel-exploitation#modprobe-path
 GoogleCTF 2021 – files wu 1
babypf
#ebpf#verifier-bypass#kernel-exploitation
 SECCON 2022 Quals 97.90 files wu 1
d3bpf
#ebpf#kernel-exploitation#verifier-bypass
 D3CTF 2022 22.50 files wu 1
tinebpf
#ebpf#jit#misaligned-jump
 PlaidCTF 2022 93.67 files wu 1
dtcaas
#dtc#integer-overflow#heap-overflow#tcache-poisoning#0day
 HITCON 2021 – files wu 1