$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
File Viewer HI Cyber Con CTF 2026 –
File_Monster NNS 2026 – files
Filtered_Reality SekaiCTF 2026 79.25 files
Firewall UofTCTF 2026 33.49 files
FlagFlix MntcrlCTF 2026 25.00 files
Forbidden_Script_Ritual MidnightFlag 2026 24.50 files
Fraga_fisken Undutmaning 2026 33.00 files
Gallery THEMCTF 2026 – files
Gartenverein_Tackenberg plfanzen 2026 25.00 files
Gav SAS 2026 Quals 31.00 files
Ghost_Freight Universal 2026 25.00 files
Greeting tkbctf 2026 25.00 files
Greyhats_Gallery GreyCatTheFlag 2026 Quals – files
Hidden_Recipe CPCTF 2026 – files
Hive WRECKCTF 2026 – files
House_Account Universal 2026 25.00 files
I_Hate_CSRF_Tokens 07CTF 2026 23.71 files
Innovation_at_Work CSCG 2026 – files
Juice_of_Apple_Vegetable_Apricot Codegate 2026 Quals – files
King_Admin FortID 2026 45.00 files
Knowledge_Base CSCG 2026 – files
L3aky_Canvas L3akCTF 2026 34.47 files
Leak BKISC 2026 – files
Lets_remove_the_script_tag. CPCTF 2026 – files
Library_of_Alexandria FromDuskTillDawn 2026 Quals 20.14 files
Lighter_Total BKISC 2026 – files
MVCharacters CodeVinci 2026 18.57 files
Media_meeting upCTF 2026 24.42 files
Memo Codegate 2026 Quals – files
Meowy nullconHackIM 2026 Goa – files
Microsoft_Axel upCTF 2026 24.42 files
Microsoft_Axel_Revenge upCTF 2026 24.42 files
My_Cat_Website BYUCTF 2026 – files
My_Product THEMCTF 2026 – files
NNS_Travel NNS 2026 – files
NeverEnding 07CTF 2026 23.71 files
NexusNFT 07CTF 2026 23.71 files
NexusNFT_Revenge 07CTF 2026 23.71 files
Nexus_as_a_Service SAS 2026 Quals 31.00 files
Nightbyte AITU 2026 Quals 24.59 files