$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
file_viewer_2 LexingtonInformaticsTournament 2025 67.32 files
fishsite VuwCTF 2025 – files
flag_auction LexingtonInformaticsTournament 2025 67.32 files
flag_checker CyKor 2025 – files
fnotes idekCTF 2025 52.06 files
framed_xss SECCON 2025 Quals – files
ftp_db Null 2025 – files
gateway_advance L3HCTF 2025 54.67 files
ghost sknbCTF 2025 – files
gigachessbased LA 2025 – files
git corCTF 2025 82.00 files
go_fish DeadSec 2025 31.29 files
go_getter squ1rrel 2025 24.25 files
gogogo_Lets_go L3HCTF 2025 54.67 files
gomail DownUnderCTF 2025 91.66 files
goose_intern_portal WATCTF 2025 – files
grandmas_notes nullconHackIM 2025 Berlin – files
group_chat LexingtonInformaticsTournament 2025 67.32 files
group_chat_2 LexingtonInformaticsTournament 2025 67.32 files
guardrails NNS 2025 – files
hangdle VuwCTF 2025 – files
hqli_me SekaiCTF 2025 55.00 files
image_compress TSG 2025 – files
image_compress_revenge TSG 2025 – files
impossible_leak SECCON 2025 Quals – files
janus K17 2025 24.83 files
jnotes idekCTF 2025 52.06 files
keyboard_lovers pingCTF 2025 32.50 files
kittychat openECSC 2025 – files
kittychat_secure openECSC 2025 – files
kittyconvert x3ctf 2025 – files
kv_messenger openECSC 2025 – files
leet-vault UofTCTF 2025 23.90 files
legendary DownUnderCTF 2025 91.66 files
library TSG 2025 – files
library_vault BSidesAlgiers 2025 – files
link_shortener b01lers 2025 44.50 files
logo Infobahn 2025 – files
man NNS 2025 – files
markdown_renderer TJCTF 2025 – files