$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
security_breach UMDCTF 2026 – files
security_breach_ruin UMDCTF 2026 – files
sine UNbreakableInternational 2026 – files
smuggler LagNCrash 2026 25.00 files
sqlalchemist MIPT 2026 Quals 24.58 files
squid L3akCTF 2026 34.47 files
svfgp UNbreakableInternational 2026 – files
tar_me CPCTF 2026 – files
varmarunionen KalmarCTF 2026 49.97 files
w BreakTheSyntax 2026 56.25 files
whatsNew K17 2026 24.83 files
who_is_whois THJCC 2026 – files
workerboard_part_1 L3akCTF 2026 34.47 files
workerboard_part_2 L3akCTF 2026 34.47 files
works_as_specified_definitely KalmarCTF 2026 49.97 files
works_as_specified_mostly KalmarCTF 2026 49.97 files
wpm_game ScriptCTF 2026 – files
yaml_practice b01lers 2026 66.00 files
0Pages 0CTF 2025 24.34 files
0verride DeadSec 2025 31.29 files
1337_translator Infobahn 2025 – files
3v3ntl0g N0PSctf 2025 24.34 files
4spam DawgCTF 2025 69.00 files
AED FullWeakEngineer 2025 24.60 files
API_Kong Auvergnhack 2025 – files
ASIS_Web_Mail ASIS 2025 Finals 96.29 files
AUTHMAN BuckeyeCTF 2025 – files
A_18_years_old_bug PwnMe 2025 Quals 24.95 files
A_Blank_Login WorldWide 2025 24.48 files
A_Very_Safe_Locker_Indeed PwnSec 2025 – files
A_easy_web QnQSec 2025 24.76 files
AdBlocker MaltaCTF 2025 Quals 24.95 files
Aggie_Bookstore TAMUctf 2025 – files
Air_Smeller CSCG 2025 – files
Alice_and_the_Literal_Escape ECW 2025 Quals – files
Amped_Upi MaltaCTF 2025 Quals 24.95 files
Archivist_s_Whisper Null 2025 – files
Archivist_s_Whisper_Revenge Null 2025 – files
ArrayVM BrunnerCTF 2025 24.66 files
Arrr_Wheres_My_Treasure DawgCTF 2025 69.00 files