$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
N1SAML N1CTF 2025 – files
NOT_XSS NoHackNoCTF 2025 23.47 files
Name_Omikuji CPCTF 2025 – files
Neuroflux_Dynamics BCACTF 2025 – files
Next_Chat bi0sCTF 2025 95.79 files
Next_Chat_Revenge bi0sCTF 2025 95.79 files
Next_Jason Null 2025 – files
No_Internet_for_You HaixlaChapelle 2025 – files
No_SQLi KalmarCTF 2025 33.89 files
NoteManager WannaGameChampionship 2025 – files
Note_Storage WannaGameChampionship 2025 – files
Notebook_Viewer SekaiCTF 2025 55.00 files
Notes justCTF 2025 97.20 files
Notetaker WorldWide 2025 24.48 files
NotoriousNote L3akCTF 2025 24.43 files
OIDC IERAE 2025 – files
OhMyPP PwnSec 2025 – files
One_shoot_game ASIS 2025 Finals 96.29 files
Orange_Skies AmateursCTF 2025 – files
PAINting_Dice GPN 2025 – files
PHPisLovePHPisLife3 cornCTF 2025 23.12 files
PSPD PwnSec 2025 – files
Padoru_Pwn_Parade Infobahn 2025 – files
Padoru_Pwn_Parade_Revenge Infobahn 2025 – files
Parse_Parse_Parse sknbCTF 2025 – files
Password_Manager IrisCTF 2025 34.30 files
PatchNotes_CMS Infobahn 2025 – files
PatchNotes_CMS_Revenge Infobahn 2025 – files
Personal_Website FullWeakEngineer 2025 24.60 files
Personal_Website_secured FullWeakEngineer 2025 24.60 files
Phantom_Params Pragyan 2025 – files
Platytours Platypwn 2025 – files
PolentaGPT cornCTF 2025 23.12 files
Political IrisCTF 2025 34.30 files
Postviewer_v52 GoogleCTF 2025 – files
Postviewer_v52_FF GoogleCTF 2025 – files
Professors_View CrewCTF 2025 38.93 files
Pure_leak ASIS 2025 Quals 96.29 files
Purely_Orange_Skies AmateursCTF 2025 – files
Puzzle Securinets 2025 Quals 70.50 files