$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
zpr nullconHackIM 2023 Berlin – files
AESAAS CyberSecurityRumble 2022 62.00 files
ARE_YOU_THE_ADMIN TFC 2022 – files
ASimpleCalculator UMDCTF 2022 – files
ArtGallery angstromCTF 2022 – files
AuthSkip angstromCTF 2022 – files
Autoraider WolvCTF 2022 – files
BTC_address ADDA 2022 – files
BabyClient ISITDTU 2022 Quals 34.00 files
BeerFast Hackappatoi 2022 24.71 files
Blatant_SQLi BCACTF 2022 – files
BlinderEye UACWS 2022 – files
Bloodthirsty_Breeze BCACTF 2022 – files
BrokenParr0t Securinets 2022 Quals 50.11 files
Byepass NahamCon 2022 EU 24.61 files
CTF LexingtonInformaticsTournament 2022 23.87 files
CaTsino MCTF 2022 Quals – files
Clob-Mate LakeCTF 2022 Quals 23.96 files
ContactAlex 1337UP 2022 22.49 files
CustomerSupport UMDCTF 2022 – files
DesperateCat RealWorld 2022 – files
Dm-LevelMedium OFPPT 2022 – files
DontOnlyMashClobber WolvCTF 2022 – files
DrunkenBathrobe Hackappatoi 2022 24.71 files
Easy_S2 N1CTF 2022 77.68 files
EnterpriseAuth KITCTFCTF 2022 – files
EnterpriseAuthReloaded KITCTFCTF 2022 – files
Etherpad KITCTFCTF 2022 – files
EyangchFanArt LexingtonInformaticsTournament 2022 23.87 files
EyangchFanArt2 LexingtonInformaticsTournament 2022 23.87 files
EyangchFanArt3 LexingtonInformaticsTournament 2022 23.87 files
FileClub FooBarCTF 2022 21.61 files
Find_My_Location FooBarCTF 2022 21.61 files
FlagPedia CyberSecurityRumble 2022 62.00 files
FlushedEmojis LexingtonInformaticsTournament 2022 23.87 files
Forest MCTF 2022 Quals – files
GlacierTopNews Glacier 2022 24.32 files
GoBucket justCTF 2022 35.66 files
Hinty_Notes InCTF 2022 – files
Imgurbage LexingtonInformaticsTournament 2022 23.87 files