$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
A_Wet_Umbrella BKISC 2026 – files
A_long_time_ago... THJCC 2026 – files
After_Image Srdnlen 2026 Quals 34.76 files
AgilePaste_3 NNS 2026 – files
Anime_Shop V1T 2026 22.14 files
Another_Note_Taking_App MntcrlCTF 2026 25.00 files
Another_Notes_App Kashi 2026 21.78 files
Aperi_et_Inveni KalmarCTF 2026 49.97 files
Baby_Web FortID 2026 45.00 files
Be_a_Legend BKCTF 2026 – files
Bird_Blog DEFCON 2026 Quals 63.22 files
Borderline_Personality EHAX 2026 – files
BrainrotChat CodeVinci 2026 18.57 files
CATHAT DUCKERZ 2026 – files
CPCTF_Market CPCTF 2026 – files
Capture_The_F__l__a__g tkbctf 2026 25.00 files
Capture_The_F__l__a__g_Revenge tkbctf 2026 25.00 files
Clash_Of_Flans MidnightFlag 2026 24.50 files
Code_Share ARA 2026 – files
Confession_App ARA 2026 – files
Crossing_Boundaries Pragyan 2026 1.84 files
Dead_Drop Universal 2026 25.00 files
Do_You_Know_Lika FortID 2026 45.00 files
Doctor_Bye_Bye FortID 2026 45.00 files
Domain_Expansion CTF@AC 2026 Quals – files
Dream_of_You tkbctf 2026 25.00 files
DriveOne K17 2026 24.83 files
Duck_Smuzzle V1T 2026 22.14 files
Duck_Wiki V1T 2026 22.14 files
ERP_system Codegate 2026 Quals – files
Ein_milljon_bjora NNS 2026 – files
Elysias_Bakery BITSCTF 2026 – files
EnD SekaiCTF 2026 79.25 files
Ended_of_Justify_Lylera_Secret ARA 2026 – files
Endless 07CTF 2026 23.71 files
Express_Auth MntcrlCTF 2026 25.00 files
Ez_Bounty Kind4SUS 2026 – files
Fair_Gambling BrunnerCTF 2026 24.66 files
Fancy_food_notifications GPN 2026 – files
FastandFoodious AITU 2026 Quals 24.59 files