$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
No_Quotes UofTCTF 2026 33.49 files
No_Quotes_2 UofTCTF 2026 33.49 files
No_Quotes_3 UofTCTF 2026 33.49 files
No_Way_Out THJCC 2026 – files
ORDER66 UMassCTF 2026 65.95 files
OpenShell NCTF 2026 – files
Orphaned Context HI Cyber Con CTF 2026 –
Ouro_no_Pesco_o upCTF 2026 24.42 files
Ouro_no_Pesco_o_Revenge upCTF 2026 24.42 files
Ouroboros HI Cyber Con CTF 2026 –
Overgrowth HI Cyber Con CTF 2026 –
PDFile PascalCTF 2026 24.00 files
PHP_is_my_passion NNS 2026 – files
Palimpsest_Vault 0xV01D 2026 V2 19.48 files
Paper_Trail Universal 2026 25.00 files
Parallel_and_Buffet tkbctf 2026 25.00 files
Pasteboard UofTCTF 2026 33.49 files
Pasty nullconHackIM 2026 Goa – files
Patisserie tkbctf 2026 25.00 files
Personal_Blog UofTCTF 2026 33.49 files
Phantom_Beacon Universal 2026 25.00 files
Pharry GPN 2026 – files
Physical_CTF CPCTF 2026 – files
Picture_This Pragyan 2026 1.84 files
Poastboard_1 RITSEC 2026 – files
Pollution GreyCatTheFlag 2026 Quals – files
Post_Builder upCTF 2026 24.42 files
RabbitTalk RITSEC 2026 – files
Race_to_the_Flag WRECKCTF 2026 – files
Recycling Undutmaning 2026 33.00 files
Red_Flag GreyCatTheFlag 2026 Quals – files
Redis_Nightmare SAS 2026 Quals 31.00 files
Regular_Dude RITSEC 2026 – files
RelayDesk Codegate 2026 Quals – files
Revenge_of_Sea_Side_Contraband UniVsThreats 2026 Quals 18.35 files
RootBabyKalmarCTF KalmarCTF 2026 49.97 files
SVG L3akCTF 2026 34.47 files
SaaS MntcrlCTF 2026 25.00 files
SafePaste BITSCTF 2026 – files
Sea_Side_Contraband UniVsThreats 2026 Quals 18.35 files