$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
Articular CrateCTF 2025 – files
AsciiDoc_Parser CyberLeague 2025 – files
Atom_Bomb b01lers 2025 44.50 files
Aurors_Archive CyberApocalypse 2025 – files
Auth_Delegation sknbCTF 2025 – files
Await_Flag CyberLeague 2025 – files
BILLY_BOARD Hack.lu 2025 98.02 files
Baby_Sandbox TRX 2025 – files
Bad_Todo IrisCTF 2025 34.30 files
Banana_Path Auvergnhack 2025 – files
Base64_based DreamhackInvitational 2025 Quals – files
Beautiful_World TSCCTF 2025 – files
Big_Phone N0PSctf 2025 24.34 files
Birthday_Card Pragyan 2025 – files
Blend_Script CPCTF 2025 – files
Blindspot_Revenge SAS 2025 Quals 20.72 files
Bonk4Cash UMassCTF 2025 48.38 files
Bookmarks ASIS 2025 Finals 96.29 files
Break_the_DOM Platypwn 2025 – files
Browser_Memo_Pad FullWeakEngineer 2025 24.60 files
Burmalda SAS 2025 Quals 20.72 files
Busy_Traffic justCTF 2025 97.20 files
C2 GreyCatTheFlag 2025 32.92 files
CTFinder idekCTF 2025 52.06 files
CakeChat BrunnerCTF 2025 24.66 files
CatGPT hxp 2025 – files
Catch_The_Goose NoHackNoCTF 2025 23.47 files
Chas_Point Codegate 2025 Quals – files
ChatPPP PlaidCTF 2025 100.00 files
Cloud VolgaCTF 2025 Quals 27.14 files
Cloud_Recipe Kind4SUS 2025 – files
CodeBreakers_1 THCon 2025 – files
Codename_Neigh Null 2025 – files
Codename_Neigh_2 Null 2025 – files
CokePHP IERAE 2025 – files
Completely_Dangerous ToH 2025 24.27 files
CornHub cornCTF 2025 23.12 files
Cursed_Notes VolgaCTF 2025 Quals 27.14 files
Cyber_Attack CyberApocalypse 2025 – files
DDNSSEC_Docker_Domain_Name_System_Security_Extensions WorldWide 2025 24.48 files