$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
owl BuckeyeCTF 2022 24.81 files
password-1 WRECKCTF 2022 – files
password-2 WRECKCTF 2022 – files
password-3 WRECKCTF 2022 – files
pastebin redpwn 2022 – files
payment-pal redpwn 2022 – files
php-revenge ASIS 2022 Finals 87.00 files
phphphp ASIS 2022 Finals 87.00 files
pickle-factory MapleCTF 2022 24.05 files
point redpwn 2022 – files
poor_ui AzureAssassinAlliance 2022 23.80 files
precisionism UIUCTF 2022 – files
rce HITCON 2022 – files
reallyprettymundane BSidesSF 2022 23.94 files
refreshing BSidesSF 2022 23.94 files
release_unicorn UACWS 2022 – files
reverser redpwn 2022 – files
s0undcl0ud HITCON 2022 – files
sdm HITCON 2022 – files
secure-page redpwn 2022 – files
skipinx SECCON 2022 Quals 97.90 files
sndbx corCTF 2022 24.92 files
spanote SECCON 2022 Quals 97.90 files
sqli2022 DownUnderCTF 2022 – files
ssrf SEETF 2022 – files
star_cereal SEETF 2022 – files
the_pigeon_files SEETF 2022 – files
toor MCTF 2022 Quals – files
transform2newyear TetCTF 2022 36.72 files
tunnelvision SecurityFest 2022 25.00 files
turtle BSidesSF 2022 23.94 files
v p4ctf 2022 51.00 files
vienelib MapleCTF 2022 24.05 files
wasmup Hayyim 2022 25.00 files
web2pdf HITCON 2022 – files
whoami FooBarCTF 2022 21.61 files
xark Block 2022 – files
xpressengine Hayyim 2022 25.00 files
xtr ASIS 2022 Quals 87.00 files
yaca PlaidCTF 2022 93.67 files