$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
phphphphphphp ASIS 2024 Quals 66.25 files
pp_ranking osuigaming 2024 – files
pressword_v2 TCP1P 2024 89.85 files
profile_page osuigaming 2024 – files
profile_page_revenge osuigaming 2024 – files
ptmCasino m0leCon 2024 Quals 80.00 files
quickstyle LA 2024 – files
r3gallery R3CTF 2024 23.50 files
reader TJCTF 2024 – files
reelfreaks Defcamp 2024 Quals – files
repayment_pal corCTF 2024 55.00 files
required_notes bi0sCTF 2024 79.83 files
rock_paper_scissors corCTF 2024 55.00 files
safestlist DiceCTF 2024 Quals 54.40 files
sappy GoogleCTF 2024 – files
secureweb 0CTF 2024 24.34 files
self_ssrf SECCON 2024 Quals – files
short_url L3HCTF 2024 23.50 files
sniffy DownUnderCTF 2024 68.04 files
sourceless MidnightSun 2024 Quals 35.74 files
srcdoc_memos idekCTF 2024 52.06 files
srcdoc_memos_revenge idekCTF 2024 52.06 files
stack_overflow D3CTF 2024 23.50 files
tarrible_storage DamCTF 2024 47.75 files
templater TJCTF 2024 – files
the_flag_sharing_network AmateursCTF 2024 24.54 files
thisRender SCTF 2024 – files
tickler angstromCTF 2024 – files
todo GPN 2024 – files
todo_hard GPN 2024 – files
topplecontainer TJCTF 2024 – files
villa BRICS+ 2024 Quals 25.00 files
waifu DownUnderCTF 2024 68.04 files
web1 TheHackerConclave 2024 20.02 files
web2 TheHackerConclave 2024 20.02 files
web3 TheHackerConclave 2024 20.02 files
yascc LakeCTF 2024 Quals – files
zoo_feedback_form DownUnderCTF 2024 68.04 files
0day corCTF 2023 36.97 files
0day_blog DownUnderCTF 2023 46.63 files