$ ctf42

Web CTF challenges

2,461 Web CTF challenges from 309 CTFs (2011–2026), 673 with writeups.

Top web techniques

#xss 70 #sql-injection 41 #ssti 30 #ssrf 26 #prototype-pollution 25 #path-traversal 25 #csp-bypass 23 #command-injection 21 #web 21 #filter-bypass 14 #xs-leak 14 #lfi 12 #rce 12 #race-condition 12 #css-injection 11

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Has
yatodo GDGAlgiers 2022 23.54 files
yeeclass HITCON 2022 – files
your-space redpwn 2022 – files
zer0tp zer0pts 2022 35.97 files
0linephp Balsn 2021 37.00 files
2linephp Balsn 2021 37.00 files
3233 LINE 2021 – files
3K_SIGNER 3kCTF 2021 24.14 files
AREA_15_call_flag Damncon 2021 17.54 files
Advancement perfectblue 2021 – files
Bookmarker Hack.lu 2021 94.48 files
COMPFEST_IDE COMPFEST 2021 – files
COMPFEST_Pay_v2 COMPFEST 2021 – files
Carmen_Sandiego_Season2 PlaidCTF 2021 99.64 files
Casino CircleCityCon 2021 25.00 files
Completely_Secure_Publishing BCACTF 2021 – files
Cookie_Spinner SECCON 2021 – files
Corporate_mfa MidnightSun 2021 Quals 50.32 files
EFS CyberSecurityRumble 2021 41.60 files
Ekans angstromCTF 2021 – files
Emoji 3kCTF 2021 24.14 files
Emojibook RACTF 2021 – files
Ez_Get_Flag ISITDTU 2021 Quals 23.08 files
Go-fs justCTF 2021 24.85 files
Hospital_Donation COMPFEST 2021 – files
Imposter 3kCTF 2021 24.14 files
JSON_but_not_notation ImaginaryCTF 2021 – files
Janken LINE 2021 – files
Jason angstromCTF 2021 – files
Jasons_Proxy DownUnderCTF 2021 – files
Jinx IJCTF 2021 – files
Just-Serving-Pages ALLES 2021 – files
L33k FwordCTF 2021 24.42 files
Last_Point_100 ISITDTU 2021 Quals 23.08 files
Lord_of_The_Flag_The_Unfinished_Chat perfectblue 2021 – files
Military_Grade RACTF 2021 – files
Notifications MCTF 2021 Quals – files
Online_Wallet_1 VolgaCTF 2021 Quals 32.73 files
Pastebin IJCTF 2021 – files
Reaction.py angstromCTF 2021 – files