$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
Welcome THCon 2022 – files
XSS401 WolvCTF 2022 – files
XtraSaltySardines angstromCTF 2022 – files
YummyGIFs Hack.lu 2022 93.70 files
artgallervie MapleCTF 2022 24.05 files
babyelectron_1 Hack.lu 2022 93.70 files
babyelectron_2 Hack.lu 2022 93.70 files
beWhatYouWannaBe AzureAssassinAlliance 2022 23.80 files
beginner-duck ASIS 2022 Quals 87.00 files
bffcalc SECCON 2022 Quals 97.90 files
bipta PlaidCTF 2022 93.67 files
blog WRECKCTF 2022 – files
bookstore MapleCTF 2022 24.05 files
bybychain N1CTF 2022 77.68 files
carrot DiceCTF 2022 24.82 files
circles BackdoorCTF 2022 24.70 files
cloudwhere KITCTFCTF 2022 – files
coinflip EBCTF 2022 – files
colorgram Srdnlen 2022 24.17 files
countdown TetCTF 2022 36.72 files
crumbs angstromCTF 2022 – files
culinary_class_room Hack.lu 2022 93.70 files
cyberchef Hayyim 2022 25.00 files
cyberheadchef Hayyim 2022 25.00 files
denoblog DiceCTF 2022 24.82 files
denobox SECCON 2022 Quals 97.90 files
deserial_killer UACWS 2022 – files
dicevault DiceCTF 2022 24.82 files
disco-party zer0pts 2022 35.97 files
easy_upload RCTF 2022 – files
easylfi SECCON 2022 Quals 97.90 files
ez_note SUSCTF 2022 – files
ezsql D3CTF 2022 22.50 files
filechecker_mini RCTF 2022 – files
firewalled ASIS 2022 Quals 87.00 files
fl4sh BackdoorCTF 2022 24.70 files
flag-viewer redpwn 2022 – files
foodAPI Hack.lu 2022 93.70 files
friends corCTF 2022 24.92 files
friendsbook pingCTF 2022 24.29 files