$ ctf42

Challenges

Category
Difficulty
CTFtime weight
–
Higher weight ≈ harder, more prestigious event.
Year
–
Must have
Reset

2461 challenges · browse all techniques

Challenge CTF Weight Category Has
Gerald_Catalog
#web-push-leak
 BCACTF 2021 – Web files wu 1
Movie-Login-2
#sql-injection
 BCACTF 2021 – Web files wu 3
Movie-Login-3
#sql-injection
 BCACTF 2021 – Web files wu 3
Stylish
#css-injection
 BCACTF 2021 – Web files wu 1
Gatekeeping
#web#nginx-gunicorn-path-bypass#access-control-bypass
 CSAW 2021 Quals 20.54 Web files wu 3
super-secure-translation-implementation
#ssti#jinja2#filter-bypass
 DamCTF 2021 24.43 Web files wu 3
BabierCSP
#web#csp-bypass#xss#cookie-theft
 DiceCTF 2021 24.82 Web files wu 3
MissingFlavortext
#web#sqlite-injection#type-juggling#filter-bypass
 DiceCTF 2021 24.82 Web files wu 3
WebIDE
#web#js-sandbox-escape#service-worker#cookie-path-bypass
 DiceCTF 2021 24.82 Web files wu 3
WebUtils
#web#xss#nodejs#cookie-theft
 DiceCTF 2021 24.82 Web files wu 3
build-a-panel
#web#sql-injection#nodejs#admin-bot
 DiceCTF 2021 24.82 Web files wu 3
Notepad
#dompurify-bypass
 DownUnderCTF 2021 – Web files wu 2
Zap
#prototype-pollution
 DownUnderCTF 2021 – Web files wu 1
gpushop
#path-normalization-bypass#proxy-bypass
 GoogleCTF 2021 – Web files wu 1
grading
#idor
 HSCTF 2021 – Web files wu 3
message-board
#cookie-tampering
 HSCTF 2021 – Web files wu 3
NodeNB
#race-condition
 Hack.lu 2021 94.48 Web files wu 1
SeekingExploits
#second-order-sqli
 Hack.lu 2021 94.48 Web files wu 1
diamond-safe
#sql-injection
 Hack.lu 2021 94.48 Web files wu 2
Awkward_Bypass
#blind-sql-injection
 ImaginaryCTF 2021 – Web files wu 1
Build-A-Website
#ssti
 ImaginaryCTF 2021 – Web files wu 3
Cookie_Stream
#stream-cipher-bitflip
 ImaginaryCTF 2021 – Web files wu 1
SaaS
#sed-command-injection
 ImaginaryCTF 2021 – Web files wu 3
Sinking_Calculator
#ssti
 ImaginaryCTF 2021 – Web files wu 1
YourNote
#xs-leak
 LINE 2021 – Web files wu 1
diveinternal
#ssrf-host-header
 LINE 2021 – Web files wu 2
LIT_BUGS
#idor#enumeration
 LexingtonInformaticsTournament 2021 23.87 Web files wu 1
alexfanclubapi
#xxe#xml
 LexingtonInformaticsTournament 2021 23.87 Web files wu 1
Custom_Blog
#php-session-lfi-rce
 MetaCTF 2021 – Web files wu 3
Yummy_Vegetables
#sql-injection
 MetaCTF 2021 – Web files wu 2
AgentTester
#union-sql-injection
 NahamCon 2021 24.98 Web files wu 3
CerealAndMilk
#php-object-injection
 NahamCon 2021 24.98 Web files wu 3
Pearl_U-Stor
#path-traversal#cygwin#symlink
 PlaidCTF 2021 99.64 Web files wu 1
Plaid_Party_Planning_IV
#ocaml-type-confusion#float-unboxing
 PlaidCTF 2021 99.64 Web files wu 1
Wowza
#race-condition#prototype-pollution#ssrf
 PlaidCTF 2021 99.64 Web files wu 2
CandyShop
#nosql-injection#ssti
 RCTF 2021 – Web files wu 1
Easyphp
#url-decode-discrepancy#auth-bypass#double-encoding
 RCTF 2021 – Web files wu 1
VerySafe
#caddy-path-traversal#php-fpm#argument-injection
 RCTF 2021 – Web files wu 1
ns_shaft_sql
#error-based-sqli#mysql
 RCTF 2021 – Web files wu 1
xss_it
#ejs-ssti#xss#xs-leak
 RCTF 2021 – Web files wu 1