$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
autofill K17 2025 24.83 files
baby_web DeadSec 2025 31.29 files
backoffice Codegate 2025 Quals – files
bad_chess_challenge DiceCTF 2025 Quals 81.00 files
beatmap_list osuigaming 2025 – files
best_cybersec_resources h4ckc0n 2025 24.23 files
best_profile L3HCTF 2025 54.67 files
betabuf K17 2025 24.83 files
bitset Infobahn 2025 – files
bitset_revenge Infobahn 2025 – files
blessed AmateursCTF 2025 – files
blogdog x3ctf 2025 – files
book TSCCTF 2025 – files
broken_challenge SECCON 2025 Quals – files
cache_it_to_win_iti LA 2025 – files
calc pingCTF 2025 32.50 files
canvasbox IERAE 2025 – files
car_seat_HEADrest niteCTF 2025 – files
chart_viewer osuigaming 2025 – files
chessbased LA 2025 – files
code-db UofTCTF 2025 23.90 files
confused_submission openECSC 2025 – files
corctf_challenge_dev_2 corCTF 2025 82.00 files
corlang corCTF 2025 82.00 files
curling Dreamhack 2025 – files
d3jtar D3CTF 2025 54.67 files
d3model D3CTF 2025 54.67 files
defense_in_depth b01lers 2025 44.50 files
desafe AmateursCTF 2025 – files
dicepass DiceCTF 2025 Quals 81.00 files
dot_private_key CTF@AC 2025 Quals 24.53 files
double_nested TJCTF 2025 – files
dry_ice_n_co smileyCTF 2025 48.61 files
eezz N1CTF 2025 – files
emojicrypt squ1rrel 2025 24.25 files
enemies NNS 2025 – files
eventhub openECSC 2025 – files
expect BSidesAlgiers 2025 – files
fancy_text_generator MaltaCTF 2025 Quals 24.95 files
file_viewer LexingtonInformaticsTournament 2025 67.32 files