$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
Utils VolgaCTF 2025 Quals 27.14 files
Vault_Tec justCTF 2025 97.20 files
Verilog_OJ HITCON 2025 – files
Viby_Notes Ulisse 2025 24.81 files
Viehawi PlaidCTF 2025 100.00 files
Virtual_Mayhem RITSEC 2025 – files
W4_Schools ASIS 2025 Finals 96.29 files
WEBLESS TFC 2025 – files
Waffles BrunnerCTF 2025 24.66 files
Warmdown IERAE 2025 – files
Weakness_in_the_Middle FullWeakEngineer 2025 24.60 files
Web FortID 2025 30.00 files
Wembsoncket BYUCTF 2025 – files
What BCACTF 2025 – files
Willy_Wonka_Web BYUCTF 2025 – files
Window_of_Opportunity L3akCTF 2025 24.43 files
Wizard_Gallery ScriptCTF 2025 – files
Workerdb CubeCTF 2025 24.71 files
XML_Translator Infobahn 2025 – files
XOD Hack.lu 2025 98.02 files
XSS_Lab N0PSctf 2025 24.34 files
XXS_XSS NoHackNoCTF 2025 23.47 files
Yapper_catcher LINE 2025 – files
Yare_yare LINE 2025 – files
Yavascript_Blog GPN 2025 – files
Yavascript_Blog_CSP_Edition GPN 2025 – files
Yeti_Killer BDSec 2025 15.62 files
Your_name sknbCTF 2025 – files
Yozuri sknbCTF 2025 – files
ZeroDrive ToH 2025 24.27 files
ZeroDrive_Revenge ToH 2025 24.27 files
acorn_clicker squ1rrel 2025 24.25 files
admin_panel osuigaming 2025 – files
aeronaut cornCTF 2025 23.12 files
agebarrier NNS 2025 – files
aligator UNbreakableInternational 2025 Quals – files
antisocial_media LA 2025 – files
auth RCTF 2025 – files
author RCTF 2025 – files
author_plus RCTF 2025 – files