$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
Youtube_unlock CTFZone 2024 Quals 73.82 files
Youtube_unlock_Revenge CTFZone 2024 Quals 73.82 files
another_csp DiceCTF 2024 Quals 54.40 files
ask_me_a_question HackPack 2024 – files
babewaf IERAE 2024 – files
bad_Notes bi0sCTF 2024 79.83 files
bbsqli L3akCTF 2024 24.43 files
biscuit_of_totality LA 2024 – files
bluenote BlueWater 2024 82.00 files
bluesocial BlueWater 2024 82.00 files
burnbin DiceCTF 2024 Quals 54.40 files
business_expense BSidesSF 2024 – files
busy_bee AmateursCTF 2024 24.54 files
calculator SanDiego 2024 24.67 files
calculator_2 DiceCTF 2024 Quals 54.40 files
child_Notes bi0sCTF 2024 79.83 files
co2 DownUnderCTF 2024 68.04 files
config BreakTheSyntax 2024 – files
copasbin COMPFEST 2024 – files
corchat_x corCTF 2024 55.00 files
crator idekCTF 2024 52.06 files
creative_login_page_challenge AmateursCTF 2024 24.54 files
crystals ImaginaryCTF 2024 49.81 files
curelf CrewCTF 2024 26.89 files
d3pythonhttp D3CTF 2024 23.50 files
disconnection AlpacaHack 2024 – files
disconnection_revenge AlpacaHack 2024 – files
double_parser SECCON 2024 Quals – files
entangled_server SpookyCTF 2024 22.40 files
erm corCTF 2024 55.00 files
evil_platforms angstromCTF 2024 – files
excess BRICS+ 2024 Quals 25.00 files
ez_web TCP1P 2024 89.85 files
ezjump SCTF 2024 – files
faso N1CTF 2024 89.85 files
fetcher TJCTF 2024 – files
fire_leak ASIS 2024 Finals 66.25 files
flamethrower idekCTF 2024 52.06 files
flower_power DamCTF 2024 47.75 files
fox_corn THJCC 2024 – files