$ ctf42

Pwn CTF challenges

3,926 Pwn CTF challenges from 382 CTFs (2011–2026), 1,025 with writeups.

Top pwn techniques

#stack-buffer-overflow 95 #format-string 88 #rop 76 #use-after-free 56 #ret2win 55 #shellcode 48 #ret2libc 37 #heap 35 #heap-overflow 34 #tcache-poisoning 29 #got-overwrite 29 #stack-pivot 25 #buffer-overflow 23 #heap-exploitation 21 #seccomp 19

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
flavor
#double-free#tcache#free-hook
 DigitalOverdose 2021 – files wu 1
Guessing_Pro
#double-free#heap
 snakeCTF 2024 Quals 24.79 files wu 1
freenote2018
#double-free#fastbin-dup#overlapping-chunks#malloc-hook-overwrite
 0CTF 2018 Finals – files wu 1
babyjeep
#double-free#fastbin-dup
 BlueHens 2021 22.62 files wu 1
LogService
#double-free#fastbin-attack
 TeamItaly 2023 24.88 files wu 1
Gotta_Go_Fast
#double-free
 ImaginaryCTF 2021 – files wu 1
custom
#dotnet-exploitation
 Aero 2021 35.17 files wu 1
babysnitch
#dns-exfiltration#firewall-bypass
 0CTF 2022 100.00 files wu 1
noflippidy
#dl-fini
 Dragon 2021 99.33 files wu 1
Hopper
#dispatcher-gadget
 IRON 2024 – files wu 1
dtb
#device-tree#kernel#aarch64
 HITCON 2021 – files wu 1
dangle_me
#dangling-pointer#stack-use-after-return
 pingCTF 2023 – files wu 1
LOKALTAL
#cve-2023-21688
 Hack.lu 2025 98.02 files wu 1
metatalk
#cve-2021-31439
 HITCON 2021 – files wu 1
sysruption
#cve-2014-4699#sysret#prefetch-attack
 corCTF 2023 36.97 files wu 1
boring-flag-runner
#custom-vm#stack-overwrite#one-gadget
 RaRCTF 2021 24.53 files wu 1
thaw_ladder
#custom-vm#signedness-bug#oob-write
 Cryovault 2026 Quals 25.00 files wu 1
D.I.S.A.
#custom-vm#range-check-bypass#oob-write
 BuckeyeCTF 2024 50.91 files wu 1
game
#custom-vm#out-of-bounds (oob)
 RCTF 2021 – files wu 1
mixtpeailbc
#custom-vm#oob-read#libc-leak
 b01lers 2024 30.80 files wu 1
Revenant_buddy
#custom-vm#obfuscation
 ASIS 2026 Quals 90.53 files wu 1
PwnSec_Support
#custom-vm#lua#web-exploitation
 PwnSec 2026 33.89 files wu 1
boiledvm
#custom-vm#jit
 b01lers 2021 22.99 files wu 1
garden
#custom-vm#garbage-collector-bug#oob-write
 DiceCTF 2026 Quals 100.00 files wu 1
Mediocrity
#custom-vm#arbitrary-syscall
 Codegate 2023 Quals – files wu 1
Dead_Letter
#custom-protocol#use-after-free (uaf)#crc32
 ASIS 2026 Quals 90.53 files wu 1
snakechat
#custom-protocol#client-exploitation
 snakeCTF 2024 Quals 24.79 files wu 1
Print_Print_Revolution
#custom-printf#format-string#arbitrary-write
 SunshineCTF 2026 51.63 files wu 1
babyFMT
#custom-printf#format-string
 N1CTF 2021 53.54 files wu 1
mcchttp
#custom-http-server
 PatriotCTF 2022 24.52 files wu 1
PasswordManager
#custom-heap#heap-exploitation
 PatriotCTF 2022 24.52 files wu 1
The_Mound
#custom-heap#double-free#arbitrary-write#got-overwrite
 RaRCTF 2021 24.53 files wu 1
guess-god
#custom-compression#memory-corruption
 BuckeyeCTF 2021 24.81 files wu 1
n0tes-revenge
#custom-allocator-exploitation
 BSidesTLV 2023 35.00 files wu 1
slop_allocator
#custom-allocator#heap
 TRX 2026 – files wu 1
palindromatic
#cross-cache-uaf#dirtypipe
 bi0sCTF 2024 79.83 files wu 1
Cache_of_Castaways
#cross-cache-overflow#cred-overwrite
 corCTF 2022 24.92 files wu 1
Full_Chain_Wall_Rose
#cross-cache
 HITCON 2023 Quals 99.75 files wu 1
bypy
#cpython-bytecode#oob-read
 TSG 2023 – files wu 1
cold
#cpp-decompression#oob-read-write#small-string-optimization#rop
 CSAW 2021 Quals 20.54 files wu 1