$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
Custom_Web_Server_1 HKCERT 2024 Quals – files
Custom_Web_Server_2 HKCERT 2024 Quals – files
DOMDOM PatriotCTF 2024 31.83 files
DVP R3CTF 2024 23.50 files
Dangling ASIS 2024 Quals 66.25 files
Dear_Admin Wargames.MY 2024 – files
Dialing_for_Danger HackHavoc 2024 – files
Duck_Finder BCACTF 2024 – files
Easy_Mergers_v0.1 UTCTF 2024 – files
Echo_as_a_Service HITCON 2024 Quals 100.00 files
EquipTracker Hack.lu 2024 100.00 files
Esc_Error N1CTF 2024 89.85 files
Even_more_flags GPN 2024 – files
EzQl WMCTF 2024 – files
Ez_flag_v2 KalmarCTF 2024 24.21 files
FLASK_DESTROYER TFC 2024 – files
FUNNY TFC 2024 – files
Fajny_Jagazyn_Wartosci_Kluczy hxp 2024 – files
Fancy_Text_Viewer SanDiego 2024 24.67 files
Fearless_Concurrency GreyCatTheFlag 2024 Quals – files
Feature_Unlocked CyberSpace 2024 24.83 files
Fileshare openECSC 2024 round1 – files
Firefun_3 BlueHens 2024 34.05 files
Flag_remover GPN 2024 – files
Free_Telegram_App m0leCon 2024 Quals 80.00 files
Front_Page CyberSecurityRumble 2024 Quals 100.00 files
Funny_buttons CTFZone 2024 Quals 73.82 files
Fuper_Fibernetic_Interpolator openECSC 2024 round3 – files
Futari_APIs IERAE 2024 – files
Game_Arcade GoogleCTF 2024 – files
Gargantua MCTF 2024 Quals – files
Geo_Weapon BlueWater 2024 82.00 files
Geo_Weapon ISITDTU 2024 Quals 51.00 files
Ghazy_Corp 0xL4ugh 2024 25.00 files
Gimme_Content_Type Mapna 2024 24.59 files
Global_Backups 1337UP 2024 – files
GoSweeper openECSC 2024 round2 – files
Goosemon squ1rrel 2024 24.25 files
Grand_Prix_Heaven GoogleCTF 2024 – files
Grand_Resort_for_Pwning_Cats openECSC 2024 round3 – files