$ ctf42

Web CTF challenges

2,454 Web CTF challenges from 308 CTFs (2011–2026), 449 with writeups.

Top web techniques

#xss 38 #sql-injection 23 #web 21 #csp-bypass 19 #ssrf 18 #prototype-pollution 15 #path-traversal 15 #ssti 13 #command-injection 12 #lfi 10 #race-condition 9 #css-injection 8 #rce 8 #dom-clobbering 7 #stored-xss 7

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
Perfect_Picture
#image-upload-bypass
 ImaginaryCTF 2023 34.52 files wu 3
grading
#idor
 HSCTF 2021 – files wu 3
Editor
#html-injection#local-file-read
 SwampCTF 2025 40.40 files wu 3
force
#graphql-batching-attack#rate-limit-bypass
 corCTF 2023 36.97 files wu 3
gotm
#go-template-ssti
 LINE 2022 – files wu 3
Door_unLocked
#cve-2021-40346
 Intent 2021 19.97 files wu 3
message-board
#cookie-tampering
 HSCTF 2021 – files wu 3
lemonthinker
#command-injection
 RaRCTF 2021 24.53 files wu 3
DANCE
#aes-gcm#tag-forgery
 TSG 2023 – files wu 3
Cipher_Preset_Button TSG 2024 – files wu 3
Cookie_Clicker BCACTF 2024 – files wu 3
I_Have_Been_Pwned TSG 2024 – files wu 3
Juice HKUSTFirebird 2024 – files wu 3
No_Code UofTCTF 2024 23.90 files wu 3
Toolong_Tea TSG 2024 – files wu 3
Whats_My_Password IrisCTF 2024 24.59 files wu 3
flaglang LA 2024 – files wu 3
Mastodont Hack.lu 2023 94.73 files wu 3
flag-shop HSCTF 2023 – files wu 3
momomomomemomemo LINE 2023 – files wu 3
Flaskmetal_Alchemist NahamCon 2022 24.61 files wu 3
Hackbar Hackappatoi 2022 24.71 files wu 3
sigma NahamCon 2022 EU 24.61 files wu 3
superbee Codegate 2022 Quals – files wu 3
L10N_Poll BCACTF 2021 – files wu 3
Regular_Website BCACTF 2021 – files wu 3
Waffle m0leCon 2021 Quals 24.55 files wu 3
ascii_art_as_a_service ASIS 2021 Quals 89.22 files wu 3
sparta Zh3r0 2021 – files wu 3
justPocketTheBase
#xss-filter-bypass
 justCTF 2024 Quals 77.17 files wu 2
hptla
#xss-event-handler
 LA 2023 – files wu 2
b01ler_ad
#xss#puppeteer-admin-bot
 b01lers 2024 30.80 files wu 2
lovely_nonces
#xss#csp-nonce-bypass
 ASIS 2021 Quals 89.22 files wu 2
Brainfxxk_Challenge
#xss#csp-bypass
 TSG 2023 – files wu 2
absurdres
#xss#csp-bypass
 TSG 2023 – files wu 2
Modern_Sicilian_Network
#xss#cross-subdomain
 TeamItaly 2023 24.88 files wu 2
Image_gallery_1
#xss#bfcache
 bi0sCTF 2024 79.83 files wu 2
Scratchpad
#xs-search
 Dragon 2020 98.00 files wu 2
Dangerous
#x-forwarded-for
 justCTF 2023 53.00 files wu 2
blazingfast
#web#xss#unicode-normalization
 DiceCTF 2022 24.82 files wu 2