Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

Challenges

Filter and sort these in the challenge browser →

Challenge	CTF	Weight	Has
Throw_your_malware_here	SEETF 2023	–	files wu 1
UnmarkedKey	UTCTF 2023	–	files wu 1
area51	BuckeyeCTF 2023	34.50	files wu 1
cgi_fridays	DownUnderCTF 2023	46.63	files wu 1
kattinger	snakeCTF 2023	–	files wu 1
makes_sense	ASIS 2023 Quals	89.80	files wu 1
notes	TJCTF 2023	–	files wu 1
proxed	InternetFestival 2023 Quals	25.00	files wu 1
robotank	snakeCTF 2023	–	files wu 1
safenote	LINE 2023	–	files wu 1
screenshot	WaniCTF 2023	24.99	files wu 1
unfinished	DiceCTF 2023	36.70	files wu 1
CrabCommodities	SekaiCTF 2022	24.86	files wu 1
Frame	UIUCTF 2022	–	files wu 1
Logs	OFPPT 2022	–	files wu 1
Safelist	SekaiCTF 2022	24.86	files wu 1
WildDevTools	BSidesTLV 2022	23.94	files wu 1
animals	TetCTF 2022	36.72	files wu 1
dnu-merch	TJCTF 2022	–	files wu 1
dyslexxec	DownUnderCTF 2022	–	files wu 1
fxxkcors	SUSCTF 2022	–	files wu 1
hackerplace	b01lers 2022	33.05	files wu 1
portalstrology	TJCTF 2022	–	files wu 1
Carmen_Sandiego	PlaidCTF 2021	99.64	files wu 1
FBG	RaRCTF 2021	24.53	files wu 1
Mixed	Securinets 2021 Quals	41.71	files wu 1
ProgrammersHateProgramming	PBjar 2021	23.18	files wu 1
SOP	BuckeyeCTF 2021	24.81	files wu 1
jsss	ASIS 2021 Finals	89.22	files wu 1
maas2	RaRCTF 2021	24.53	files wu 1
mail_tester	perfectblue 2021	–	files wu 1
penny_wise	VolgaCTF 2021 Quals	32.73	files wu 1
welcome_to_tsgctf	TSG 2021	–	files wu 1
Yet Another Python SSTI Challenge #ssti #jinja2 #filter-bypass	TECHCOMFEST 2022	–	files src
mergers #prototype-pollution #command-injection	UTCTF 2024	–	files src
Game #php #deserialization #wakeup-bypass	SekaiCTF 2022	24.86	files src
Keith Logger #browser-extension #mongodb	HSCTF 2019	–	files src
0day_on_ipaddress	upCTF 2026	24.42	files
ASS	CSCG 2026	–	files
ASS	NNS 2026	–	files