$ ctf42

Challenges

Category
Difficulty
CTFtime weight
–
Higher weight ≈ harder, more prestigious event.
Year
–
Must have
Reset

2461 challenges · browse all techniques

Challenge CTF Weight Category Has
simple_blog
#xss#csp-bypass#trusted-types
 zer0pts 2021 24.56 Web files wu 3
ContrivedWebProblem
#ssrf#ftp-crlf-injection#rabbitmq#nodemailer-attachment
 PlaidCTF 2020 93.15 Web files wu 3
MoozChat
#command-injection#jwt#weak-diffie-hellman#meet-in-the-middle (mitm)
 PlaidCTF 2020 93.15 Web files wu 1
Secret_Agents
#sql-injection#user-agent
 angstromCTF 2020 – Web files wu 1
UBI
#chrome-n-day#xss
 angstromCTF 2020 – Web files wu 1
hackme
#parser-differential
 hxp 2020 94.00 Web files wu 3
heiko
#command-injection
 hxp 2020 94.00 Web files wu 1
resonator
#fastcgi-ssrf
 hxp 2020 94.00 Web files wu 1
security-scanner
#memcache-injection
 hxp 2020 94.00 Web files wu 1
Amoebananas!
#view-source
 angstromCTF 2016 – Web files src wu 1
SuperSecure™
#client-side-auth#javascript
 angstromCTF 2016 – Web files src wu 1
Big Data
#pcap-analysis#telnet
 CSAW 2014 Quals – Web files wu 1
TapTap
#sql-injection#stacked-queries#postgresql
 COMPFEST 2026 – Web files wu 1
moraine
#crc-collision#adler32#deduplication
 Cryovault 2026 Quals 25.00 Web files wu 1
near_miss
#fuzzy-match-oracle#oracle-attack
 Cryovault 2026 Quals 25.00 Web files wu 1
Likeness
#unicode-normalization#nfkc#auth-bypass
 Haruulzangi 2026 Quals – Web files wu 1
My_Avatar
#lfi (local-file-inclusion)#php-include#image-polyglot#avif
 Haruulzangi 2026 Quals – Web files wu 1
Migurimental SekaiCTF 2026 79.25 Web files wu 1
Ping_Me
#command-injection#rce
 TraceBash 2026 25.00 Web files wu 1
Nabi_AI UIUCTF 2026 – Web files wu 1
Awklet
#path-traversal#awk-cgi
 BuckeyeCTF 2025 – Web files wu 1
BIG_CHUNGUS
#query-parsing#express
 BuckeyeCTF 2025 – Web files wu 1
Packages
#sql-injection
 BuckeyeCTF 2025 – Web files wu 1
ebg13
#ssrf
 BuckeyeCTF 2025 – Web files wu 1
DNXSS_over_HTTPS
#dns-txt-record-xss
 KalmarCTF 2025 33.89 Web files wu 1
G0tchaberg
#html-to-pdf-lfi
 KalmarCTF 2025 33.89 Web files wu 2
gamblecore
#parseint-coercion-bug
 LakeCTF 2025 Quals – Web files wu 1
ProfileEditor
#path-traversal#flask
 PwnMe 2025 Quals 24.95 Web files wu 1
Blindspot
#schnorr#nonce-reuse#signature-forgery
 SAS 2025 Quals 20.72 Web files wu 1
Bubble_Tea_Diaries
#stored-xss#bbcode-parser#html-escape-bypass#jwt
 SAS 2025 Quals 20.72 Web files wu 1
Drift_Chat
#broken-access-control#missing-return#go
 SAS 2025 Quals 20.72 Web files wu 1
Proxy
#ssrf#caddy-admin-api#log-injection#rce
 SAS 2025 Quals 20.72 Web files wu 1
bigbabycode
#mceliece#hamming-code#error-correction
 SAS 2025 Quals 20.72 Web files wu 1
Focus._Speed._I_am_speed. Srdnlen 2025 – Web files wu 2
zStego TRX 2025 – Web files wu 1
Just_Another_Notes_App niteCTF 2025 – Web files wu 1
StoryCreator x3ctf 2025 – Web files wu 2
Manifesto 0xL4ugh 2024 25.00 Web files wu 1
Proxy_For_Life
#go-pprof#info-leak
 Akasec 2024 23.15 Web files wu 1
Upload
#pdfjs#cve-2024-4367#xss
 Akasec 2024 23.15 Web files wu 1