$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
gas_giant b01lers 2026 66.00 files
geckodrce TRX 2026 – files
get_file1 THJCC 2026 Summer – files
get_file2 THJCC 2026 Summer – files
gov.codevinci.it CodeVinci 2026 18.57 files
greyline_junction Cryovault 2026 Quals 25.00 files
hackersBOTted squ1rrel 2026 32.47 files
haproxy_ma_cha_proxy FromDuskTillDawn 2026 Quals 20.14 files
how_do_i_write JerseyCTF 2026 37.00 files
job_app_simulator b01lers 2026 66.00 files
json_warehouse GaslightCTF 2026 – files
knowledge_base MIPT 2026 Quals 24.58 files
lactf_invoice_generator LA 2026 – files
less_than_w_plus SekaiCTF 2026 79.25 files
mAuth upCTF 2026 24.42 files
macrohard_azuer K17 2026 24.83 files
markdown2 TRX 2026 – files
meh THEMCTF 2026 – files
messageboard GaslightCTF 2026 – files
mirror_temple DiceCTF 2026 Quals 100.00 files
mirror_temple_b_side DiceCTF 2026 Quals 100.00 files
ml_platform L3akCTF 2026 34.47 files
moosespell VuwCTF 2026 25.00 files
msgboard THJCC 2026 – files
nyoom Securinets 2026 Quals 85.12 files
on_point BYUCTF 2026 – files
penpal squ1rrel 2026 32.47 files
perchance NNS 2026 – files
photo_storage MIPT 2026 Quals 24.58 files
ping_notes pingCTF 2026 46.20 files
pingdrafts pingCTF 2026 46.20 files
playground FromDuskTillDawn 2026 Quals 20.14 files
rails squ1rrel 2026 32.47 files
recipeloader GPN 2026 – files
restaurant_builder GPN 2026 – files
rusty_proxy BITSCTF 2026 – files
sastrugi Cryovault 2026 Quals 25.00 files
screengrab BlueHens 2026 44.77 files
sea_shell CTF@AC 2026 Quals – files
sealed_board Codegate 2026 Quals – files