$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
Safe_embed CyKor 2025 – files
Sandbox_Viewer Infobahn 2025 – files
Satellite_as_a_Service Ctrl+Space 2025 Quals 25.00 files
SatoNote ASIS 2025 Quals 96.29 files
Say_my_name PwnMe 2025 Quals 24.95 files
ScrapScrap_I ASIS 2025 Quals 96.29 files
ScrapScrap_II ASIS 2025 Quals 96.29 files
ScrapScrap_I_Revenge ASIS 2025 Quals 96.29 files
Sculpture_Revenge smileyCTF 2025 48.61 files
Secrets Securinets CTF 2025 Quals – files
SecureDoc 0CTF 2025 24.34 files
SecureTextBin m0leCon 2025 Quals 75.00 files
Secure_Letter QnQSec 2025 24.76 files
Secure_by_Default GPN 2025 – files
Seedling Nowruz 2025 – files
Seedling_Seedling Nowruz 2025 – files
SeekDeep CubeCTF 2025 24.71 files
Sgrpc GreyCatTheFlag 2025 32.92 files
Shipping_Bay UIUCTF 2025 – files
Shop_of_life BackdoorCTF 2025 – files
Silent_Profit R3CTF 2025 54.67 files
Simple_Chat cornCTF 2025 23.12 files
Simple_Tasks justCTF 2025 97.20 files
Single_Sign_Off niteCTF 2025 – files
Single_Slice_Of_CakeNews BrunnerCTF 2025 24.66 files
Slide_Sandbox IERAE 2025 – files
Small_File_Storage DreamhackInvitational 2025 Quals – files
Smile_at_me GPN 2025 – files
Snak_ASM BreachCTF 2025 23.86 files
SotaFuji FullWeakEngineer 2025 24.60 files
Sourceless GoogleCTF 2025 – files
Sparkling_Sky Srdnlen 2025 – files
Spelling_it_out Pragyan 2025 – files
Spring_Drive HeroCTF 2025 – files
StackBank1 Ulisse 2025 24.81 files
StackBank2 Ulisse 2025 24.81 files
Stonks RITSEC 2025 – files
String_Calculator CPCTF 2025 – files
Super_Secret_Notes Pragyan 2025 – files
Super_Unsecure_Auth h4ckc0n 2025 24.23 files