$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
Life_Quiz openECSC 2024 round1 – files
Little_Nightmare AirOverflow 2024 25.00 files
LiveMD ASIS 2024 Finals 66.25 files
Loan_App IRON 2024 – files
Log_Me_In CSAW 2024 Quals 21.80 files
Lost_Pyramid CSAW 2024 Quals 21.80 files
MOC_Inc. BCACTF 2024 – files
Markdown_Parser GreyCatTheFlag 2024 Quals – files
MartiansOnly SpaceHeroes 2024 24.50 files
MeMent0o Securinets 2024 Quals 95.59 files
Mexico_City_Tour FortID 2024 – files
Micro 0xL4ugh 2024 25.00 files
Microservice_Shitlord CybHackCTF 2024 – files
Modern_Wordpress R3CTF 2024 23.50 files
Mokersee IrisCTF 2024 24.59 files
More_Letters ASIS 2024 Finals 66.25 files
Mutex_Lock squ1rrel 2024 24.25 files
My_Pizza_Shop PwnSec 2024 – files
My_Sky_Blog 4TS 2024 24.40 files
Mystizs_Mini_CTF_1 HKCERT 2024 Quals – files
Mystizs_Mini_CTF_2 HKCERT 2024 Quals – files
N0D3BR3ACHERs JerseyCTF 2024 21.26 files
NDWPP SekaiCTF 2024 36.96 files
Never_gonna_tell_a_lie_and_type_you GPN 2024 – files
Nice_View_2 CrewCTF 2024 26.89 files
NinjaClub R3CTF 2024 23.50 files
No_Sql_Injection GreyCatTheFlag 2024 Quals – files
No_eXcuSeS KalmarCTF 2024 24.21 files
Nonogram_Pt._2_Disgraced BlueHens 2024 34.05 files
Notee UrchinSecAware 2024 – files
Noter CybHackCTF 2024 – files
Notes NTUA_H4CK 2024 24.40 files
Notes Platypwn 2024 – files
Notes openECSC 2024 round3 – files
Nuclear_Launch_Codes WxMCTF 2024 23.59 files
OGOGPGOGO CPCTF 2024 – files
P2C ImaginaryCTF 2024 49.81 files
PBX 0CTF 2024 24.34 files
PDF_Box TheCyberJawaraInternational 2024 23.62 files
PEPE L3akCTF 2024 24.43 files