CTF challenges & writeups

2461 challenges · browse all techniques

Challenge	CTF	Weight	Category	Has
true_web_assembly	hxp 2022	–	Web	files wu 2
vault #header-whitespace-normalization #admin-bot #auth-bypass	pingCTF 2022	24.29	Web	files wu 1
vsCAPTCHA	vsCTF 2022	23.32	Web	files wu 2
2rm1 #java-rmi #insecure-deserialization #ssrf #jndi	0CTF 2021 Quals	–	Web	files wu 1
online_compiler #php-disable-functions-bypass #ffi	3kCTF 2021	24.14	Web	files wu 2
jsss	ASIS 2021 Finals	89.22	Web	files wu 1
L10N_Poll	BCACTF 2021	–	Web	files wu 3
Regular_Website	BCACTF 2021	–	Web	files wu 3
Intellimage #hash-length-extension #exiftool-rce	BSidesTLV 2021	23.94	Web	files wu 1
Huge_Primes #integer-factorization #yafu	Block 2021	30.75	Web	files wu 2
jupyter #stored-xss #jupyter-notebook	BuckeyeCTF 2021	24.81	Web	files wu 1
tesseract #command-injection	BuckeyeCTF 2021	24.81	Web	files wu 1
Puppet #chrome-devtools-protocol #arbitrary-file-read	CircleCityCon 2021	25.00	Web	files wu 1
Sticky_Notes #http-desync #unicode-length-mismatch	CircleCityCon 2021	25.00	Web	files wu 1
imgfiltrate #xss #csp-bypass #fixed-nonce	CircleCityCon 2021	25.00	Web	files wu 1
ParrotOx #deserialization	FwordCTF 2021	24.42	Web	files wu 1
SeoFtw #cypher-injection	FwordCTF 2021	24.42	Web	files wu 1
Shisui #dom-clobbering	FwordCTF 2021	24.42	Web	files wu 1
Memory #php-session-upload-progress	IJCTF 2021	–	Web	files wu 1
Raas #ssrf	InCTF 2021	70.41	Web	files wu 2
json_analyser #json-interoperability	InCTF 2021	70.41	Web	files wu 1
md-notes #postmessage-xss	InCTF 2021	70.41	Web	files wu 1
Door_unLocked #cve-2021-40346	Intent 2021	19.97	Web	files wu 3
Etulosba #path-traversal	Intent 2021	19.97	Web	files wu 3
Just_Not_My_Type #php #strcmp-type-juggling	KillerQueen 2021	21.14	Web	files wu 1
PHat_Pottomed_Girls #php #filter-bypass #code-injection	KillerQueen 2021	21.14	Web	files wu 1
Repeated_Lock #jinja2-ssti	MetaRed 2021	–	Web	files wu 1
tornado #tornado #ssti	N1CTF 2021	53.54	Web	files wu 1
ProgrammersHateProgramming_2 #php-filter-bypass #nested-keyword-bypass #php-code-injection	PBjar 2021	23.18	Web	files wu 1
omgsosmolhowhacc_2_electric_boogaloo #command-injection #argument-injection #newline-injection #curl	PBjar 2021	23.18	Web	files wu 1
Carmen_Sandiego	PlaidCTF 2021	99.64	Web	files wu 1
illusion #prototype-pollution #rce	Pwn2Win 2021	83.41	Web	files wu 3
ruthless_monster #exiftool #cve-2021-22204 #djvu #polyglot-file	Pwn2Win 2021	83.41	Web	files wu 1
Electroplating #seccomp-bypass #shared-library-injection #file-upload	RaRCTF 2021	24.53	Web	files wu 1
MAAS #blind-command-injection #time-based	RaRCTF 2021	24.53	Web	files wu 1
SecureStorage #xss #postmessage #iframe-injection	RaRCTF 2021	24.53	Web	files wu 1
lemonthinker #command-injection	RaRCTF 2021	24.53	Web	files wu 3
secureuploader #path-traversal #os-path-join	RaRCTF 2021	24.53	Web	files wu 2
GOFTP #ssrf #ftp-passive-mode #dns-rebinding	SCTF 2021	–	Web	files wu 1
Loginme #ssti #http-header-injection	SCTF 2021	–	Web	files wu 2

Challenges