$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
midi_visualizer idekCTF 2025 52.06 files
mini_me DownUnderCTF 2025 91.66 files
mohomi R3CTF 2025 54.67 files
money CTF@AC 2025 Quals 24.53 files
msbug corCTF 2025 82.00 files
msbugs_revenge corCTF 2025 82.00 files
msfrognymize2 corCTF 2025 82.00 files
musicplayer b01lers 2025 44.50 files
my-second-app UofTCTF 2025 23.90 files
my_first_website LexingtonInformaticsTournament 2025 67.32 files
n1cat N1CTF 2025 – files
nasOS VolgaCTF 2025 Quals 27.14 files
nerpagenna CTFZone 2025 Quals 92.45 files
njaas b01lers 2025 44.50 files
no_code b01lers 2025 44.50 files
nobin DiceCTF 2025 Quals 81.00 files
off_dah_rails_m8 DownUnderCTF 2025 91.66 files
old_site LA 2025 – files
old_site_b_side DiceCTF 2025 Quals 81.00 files
osu_css osuigaming 2025 – files
paper corCTF 2025 82.00 files
perfectly_normal_theme_editor h4ckc0n 2025 24.23 files
photographer RCTF 2025 – files
pied_piper CTFZone 2025 Quals 92.45 files
plfanzen_laden openECSC 2025 – files
plfanzen_laden_revenge openECSC 2025 – files
plinko LA 2025 – files
polish_bar openECSC 2025 – files
portrait squ1rrel 2025 24.25 files
prepared-1 UofTCTF 2025 23.90 files
prepared-2 UofTCTF 2025 23.90 files
prismatic-blogs UofTCTF 2025 23.90 files
proxies CrewCTF 2025 38.93 files
pwnable_document_format K17 2025 24.83 files
pyramid DiceCTF 2025 Quals 81.00 files
r00tch4t P3rf3ctr00t 2025 – files
r3note R3CTF 2025 54.67 files
rednote SekaiCTF 2025 55.00 files
regex_auth FullWeakEngineer 2025 24.60 files
roundtrip TSG 2025 – files