$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
rusty_rest_shop ToH 2025 24.27 files
rweb QnQSec 2025 24.76 files
s3cr3ct_w3b QnQSec 2025 24.76 files
s3cr3ct_w3b_revenge QnQSec 2025 24.76 files
safe_layout TPCTF 2025 – files
safe_url corCTF 2025 82.00 files
scanme idekCTF 2025 52.06 files
scavenger-hunt UofTCTF 2025 23.90 files
scorepost_generator osuigaming 2025 – files
screenshooter UNbreakableInternational 2025 Quals – files
secure_letter_revenge QnQSec 2025 24.76 files
seo_blog Null 2025 – files
server_side_rendering WATCTF 2025 – files
slash_slash Infobahn 2025 – files
slow_down pingCTF 2025 32.50 files
sodium DownUnderCTF 2025 91.66 files
sprint_admin pingCTF 2025 32.50 files
spukhafte_Fernwirkung KalmarCTF 2025 33.89 files
submission x3ctf 2025 – files
supersqli TPCTF 2025 – files
tabled LexingtonInformaticsTournament 2025 67.32 files
templateception_revenge Shakti 2025 34.10 files
theme_generator CTF@AC 2025 Quals 24.53 files
thumbor_1 TPCTF 2025 – files
thumbor_2 TPCTF 2025 – files
tidy_quic D3CTF 2025 54.67 files
timeless UofTCTF 2025 23.90 files
toh_synth ToH 2025 24.27 files
trouble_at_the_spa b01lers 2025 44.50 files
vidplow CSCG 2025 – files
vite SekaiCTF 2025 55.00 files
vouched corCTF 2025 82.00 files
whack_a_mole LA 2025 – files
whats_my_number LA 2025 – files
when b01lers 2025 44.50 files
works_modulo_security WATCTF 2025 – files
worlds_hardest_quiz LexingtonInformaticsTournament 2025 67.32 files
wp_admin HITCON 2025 – files
yamlquiz corCTF 2025 82.00 files
45c6 DreamhackInvitational 2024 Quals – files