$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
game Jade 2022 23.95 files
genshin-shop ISITDTU 2022 Quals 34.00 files
gnuboard Hayyim 2022 25.00 files
gogogo AzureAssassinAlliance 2022 23.80 files
gpushop2 GoogleCTF 2022 – files
guess-the-pokemon LexingtonInformaticsTournament 2022 23.87 files
h.n.y ASIS 2022 Finals 87.00 files
hackptmd m0leCon 2022 Quals 36.00 files
hessian-onlyJdk 0CTF 2022 100.00 files
honksay MapleCTF 2022 24.05 files
horkos GoogleCTF 2022 – files
hugeblog ASIS 2022 Quals 87.00 files
imagesurfing CakeCTF 2022 – files
jimmys_blog BlackhatMEA 2022 Quals – files
js-api niteCTF 2022 22.30 files
leetmail corCTF 2022 24.92 files
lesn m0leCon 2022 Quals 36.00 files
library OFPPT 2022 – files
log4j GoogleCTF 2022 – files
maas ImaginaryCTF 2022 24.65 files
madness SecurityFest 2022 25.00 files
marked Hayyim 2022 25.00 files
me7ball LINE 2022 – files
memo-drive LINE 2022 – files
minimal-php DownUnderCTF 2022 – files
mk redpwn 2022 – files
modernism UIUCTF 2022 – files
myclient AzureAssassinAlliance 2022 23.80 files
no-symlink DownUnderCTF 2022 – files
no_cookies pingCTF 2022 24.29 files
no_sanbox ISITDTU 2022 Quals 34.00 files
not_e Hayyim 2022 25.00 files
noteKeeper DiceCTF 2022 24.82 files
notes-1 WRECKCTF 2022 – files
notes-2 WRECKCTF 2022 – files
notes-3 WRECKCTF 2022 – files
noteworthy DownUnderCTF 2022 – files
oeps redpwn 2022 – files
oh-my-lotto StarCTF 2022 – files
oh-my-lotto-revenge StarCTF 2022 – files