Pwn CTF challenges

3,922 Pwn CTF challenges from 381 CTFs (2011–2026), 669 with writeups.

Top pwn techniques

Challenges

Filter and sort these in the challenge browser →

Challenge	CTF	Weight	Has
vacation-1 #stack-buffer-overflow	TJCTF 2022	–	files wu 2
2Smol #srop #stack-pivot	UTCTF 2021	–	files wu 2
imdeghost #srop #seccomp #sigreturn-chain	PBjar 2021	23.18	files wu 2
haySTACK #srand-time-seed-bruteforce #prng-prediction	CSAW 2021 Quals	20.54	files wu 2
Epic_Game #snprintf-return-oob	ICHSA 2021	–	files wu 2
More_than_shellcoding #shellcode #self-modifying-code #mprotect	VULNCON 2021	–	files wu 2
Not_That_Simple #shellcode #getdents #stack-pivot	RaRCTF 2021	24.53	files wu 2
nemoji #shellcode	hxp 2020	94.00	files wu 2
shadertoy_plus_plus #shader-oob	hxp 2022	–	files wu 2
Stackless #seccomp-shellcode	NahamCon 2022	24.61	files wu 2
ret2cds #seccomp-bypass #process-vm-writev #shellcode-injection	corCTF 2021	24.92	files wu 2
Pattern_Institute #seccomp-bypass	Intent 2021	19.97	files wu 2
easy_overflow #ret2win #stack-buffer-overflow	SEETF 2022	–	files wu 2
Pwn1 #ret2win	n00bzCTF 2023	15.12	files wu 2
redact #ret2win	LA 2023	–	files wu 2
Jump_Rope #ret2win	BCACTF 2022	–	files wu 2
ret4win #ret2win	BuckeyeCTF 2021	24.81	files wu 2
RunningOnPrayers #ret2shellcode	JerseyCTF 2024	21.26	files wu 2
Pwn2 #ret2plt-system	n00bzCTF 2023	15.12	files wu 2
Reject_humanity_return_to_libc #ret2libc #stack-buffer-overflow #got-leak	DeconstruCT.F 2021	19.69	files wu 2
newbie #ret2libc #canary-bypass #prng	TetCTF 2022	36.72	files wu 2
Pwn3 #ret2libc	n00bzCTF 2023	15.12	files wu 2
Cooldown #ret2libc	Hayyim 2022	25.00	files wu 2
Warmup #ret2libc	Hayyim 2022	25.00	files wu 2
ClassicAct #ret2dlresolve #format-string #rop	UMDCTF 2022	–	files wu 2
Smol #ret2dlresolve	NahamCon 2021	24.98	files wu 2
virtio_note #qemu-oob #rop	bi0sCTF 2024	79.83	files wu 2
hxp_silicon_foundaries_hack4 #qemu-escape	hxp 2024	–	files wu 2
cloudinspect #qemu-escape	Hack.lu 2021	94.48	files wu 2
c_mon_see_my_vulns #php-eval-injection #disable-functions-bypass #chankro #ld-preload	Pwn2Win 2021	83.41	files wu 2
echo2 #partial-overwrite #ret2libc	WolvCTF 2023	24.33	files wu 2
zehn #partial-overwrite	hxp 2021	99.41	files wu 2
sea #padding-oracle #stack-overflow	Codegate 2023 Quals	–	files wu 2
justpwnit #out-of-bounds-array-index #stack-overflow #rop	ASIS 2021 Quals	89.22	files wu 2
Blacklist_Revenge #orw	FwordCTF 2021	24.42	files wu 2
zelda #oob-write #memory-corruption #ncurses #game-logic	DiceCTF 2023	36.70	files wu 2
oneshot #oob-write #got-overwrite #integer-overflow	zer0pts 2021	24.56	files wu 2
Pwnzoo #off-by-one #function-pointer-overwrite	BSidesSF 2021	23.94	files wu 2
DUCTFnote #off-by-one	DownUnderCTF 2021	–	files wu 2
Secure_OCaml_Sandbox #ocaml-sandbox-escape #callback-register #type-confusion	PlaidCTF 2021	99.64	files wu 2