$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
Entropyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
#bcrypt-72-byte-input-truncation
 1753CTF 2025 34.82 files wu 1
lambda
#aws-lambda#cloud#dotnet-decompilation
 WaniCTF 2023 24.99 files wu 1
SPAM
#authentication-bypass#password-reset
 snakeCTF 2025 Quals 36.65 files wu 1
hack_into_skynet
#auth-bypass#sql-injection#waf-bypass#multipart
 RealWorld 2022 – files wu 1
Impersonate
#auth-bypass
 PatriotCTF 2024 31.83 files wu 1
Request_Handling
#ast-injection
 DownUnderCTF 2025 91.66 files wu 1
htpl
#ast-injection
 Hack.lu 2022 93.70 files wu 1
Argument
#argument-injection#tar-wildcard
 BYUCTF 2024 – files wu 1
sequence_gallery
#argument-injection#dc-rce
 CrewCTF 2023 20.33 files wu 1
Cybercrime_Society_Club_Germany
#argument-injection#auth-bypass
 CCCamp 2023 25.00 files wu 1
Pixel_Perfect
#arbitrary-file-upload#rce
 TRX 2026 – files wu 1
Compiler
#arbitrary-file-read
 WxMCTF 2024 23.59 files wu 1
openbio
#angularjs-csti#csp-bypass
 CakeCTF 2022 – files wu 1
airspeed
#airspeed-ssti#velocity-template#nginx-path-normalization-bypass
 QnQSec 2025 24.76 files wu 1
zero-trust
#aes-gcm-nonce-reuse
 LA 2023 – files wu 1
single_trust
#aes-gcm#short-auth-tag#known-plaintext#bruteforce
 LA 2026 – files wu 1
notactf
#aes-cbc#bit-flipping
 ImaginaryCTF 2024 49.81 files wu 1
SpaceNotes
#access-control-bypass
 THCon 2024 – files wu 1
Migurimental SekaiCTF 2026 79.25 files wu 1
Nabi_AI UIUCTF 2026 – files wu 1
Just_Another_Notes_App niteCTF 2025 – files wu 1
asterisk CyKor 2025 – files wu 1
dbchat CyKor 2025 – files wu 1
se1enium CyKor 2025 – files wu 1
zStego TRX 2025 – files wu 1
Empty_execution BraekerCTF 2024 24.72 files wu 1
Focus_on_yourSELF n00bzCTF 2024 24.23 files wu 1
KIRAN_SAU_PROBLEM PatriotCTF 2024 31.83 files wu 1
Manifesto 0xL4ugh 2024 25.00 files wu 1
Playing_on_the_Backcourts CSAW 2024 Quals 21.80 files wu 1
X_Et_Et TetCTF 2024 74.41 files wu 1
b64SiteViewer IRON 2024 – files wu 1
hah_got_em DownUnderCTF 2024 68.04 files wu 1
library_of__php b01lers 2024 30.80 files wu 1
spurdo_ebinling cr3 2024 23.96 files wu 1
CTFC 1337UP 2023 24.23 files wu 1
Easy_Cloud_Auth justCTF 2023 53.00 files wu 1
Linux_Examples m0leCon 2023 Quals 53.62 files wu 1
Stray BuckeyeCTF 2023 34.50 files wu 1
Text_Adventure_API BuckeyeCTF 2023 34.50 files wu 1