$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
ImportedKimchi HackPack 2022 35.11 files
Java WolvCTF 2022 – files
Jungle_Templating BDSec 2022 12.23 files
KnightSquadShop BDSec 2022 12.23 files
Log4baby COMPFEST 2022 – files
Ninja justCTF 2022 35.66 files
NoFlags angstromCTF 2022 – files
Numbaz CyberSecurityRumble 2022 62.00 files
OldFastJSON N1CTF 2022 77.68 files
Out-rar Winja 2022 – files
PAPA COMPFEST 2022 – files
PerfectModel GDGAlgiers 2022 23.54 files
Pipe_your_way GDGAlgiers 2022 23.54 files
PrettierOnline RCTF 2022 – files
PyCGI InCTF 2022 – files
Quotes GreyCatTheFlag 2022 24.50 files
RCE-as-a-Service-1 Glacier 2022 24.32 files
RCE-as-a-Service-2 Glacier 2022 24.32 files
RaaS-v2 ASIS 2022 Finals 87.00 files
RioOrNeo Winja 2022 – files
S3KSU4L_INJ3C710N BackdoorCTF 2022 24.70 files
SSRF101 WolvCTF 2022 – files
SchoolUnblocker angstromCTF 2022 – files
Searchify COMPFEST 2022 – files
SecureVault angstromCTF 2022 – files
SelNode GreyCatTheFlag 2022 24.50 files
ShareYourLife THCon 2022 – files
SmallMistakeBigMistake HeroCTF 2022 51.22 files
Smuggler BSidesTLV 2022 23.94 files
Story_Mode BCACTF 2022 – files
StylishPlus BCACTF 2022 – files
Sustenance angstromCTF 2022 – files
ThePhotoExhibit FooBarCTF 2022 21.61 files
ToLeSion AzureAssassinAlliance 2022 23.80 files
TropicalAPI BSidesTLV 2022 23.94 files
UnhackableCodeRunner UACTF 2022 – files
UploadEz ISITDTU 2022 Quals 34.00 files
VacationGallery COMPFEST 2022 – files
Validator GDGAlgiers 2022 23.54 files
Vuln-Drive2 InCTF 2022 – files