CTF challenges & writeups

2454 challenges · browse all techniques

Challenge	CTF	Weight	Category	Has
Purify #wasm-buffer-overflow	Mapna 2024	24.59	Web	files wu 1
Hacker_Web_Store #sql-injection	NahamCon 2024	41.61	Web	files wu 1
Open_Seasame #stored-xss #command-injection #admin-bot	PatriotCTF 2024	31.83	Web	files wu 1
Funny_lfr #lfi (local-file-inclusion)#race-condition	SekaiCTF 2024	36.96	Web	files wu 1
Tagless #xss #csp-bypass #mime-sniffing	SekaiCTF 2024	36.96	Web	files wu 1
htmlsandbox #xss #csp-bypass #charset-confusion	SekaiCTF 2024	36.96	Web	files wu 1
Potion_Seller #business-logic-flaw	SwampCTF 2024	40.40	Web	files wu 1
SpaceNotes #access-control-bypass	THCon 2024	–	Web	files wu 1
Log_Action #ssrf #cve-2024-34351	UIUCTF 2024	–	Web	files wu 3
pwnypass #css-injection #browser-extension	UIUCTF 2024	–	Web	files wu 1
Crabby_Clicker #http-pipelining #race-condition	UMassCTF 2024	43.10	Web	files wu 1
3_city_elves_writeups #command-injection #waf-bypass	b01lers 2024	30.80	Web	files wu 1
b01ler_ad #xss #puppeteer-admin-bot	b01lers 2024	30.80	Web	files wu 2
imagehost #jwt-kid-path-traversal #rs256-key-confusion #auth-bypass	b01lers 2024	30.80	Web	files wu 1
Image_gallery_1 #xss #bfcache	bi0sCTF 2024	79.83	Web	files wu 2
Image_gallery_2 #dom-clobbering #cache-probing	bi0sCTF 2024	79.83	Web	files wu 1
Variety_Notes #redos #csp-bypass	bi0sCTF 2024	79.83	Web	files wu 1
corctf_challenge_dev #stored-xss #csp-bypass #extension-exploitation	corCTF 2024	55.00	Web	files wu 1
phpnotes #http-request-smuggling	hxp 2024	–	Web	files wu 1
Another_Another_CSP #css-injection-leak	justCTF 2024 Quals	77.17	Web	files wu 1
justPocketTheBase #xss-filter-bypass	justCTF 2024 Quals	77.17	Web	files wu 2
File_Sharing_Portal #ssti-via-filename	n00bzCTF 2024	24.23	Web	files wu 2
flarenotes_revenge #xss #dompurify-bypass #cloudflare-bypass	vsCTF 2024	34.00	Web	files wu 1
gimme_csp #csp-bypass #content-type-confusion #xss	ASIS 2023 Finals	89.80	Web	files wu 1
funny_factorials #lfi (local-file-inclusion)#path-normalization-bypass #flask	AmateursCTF 2023	24.54	Web	files wu 3
go-gopher #ssrf #gopher-protocol	AmateursCTF 2023	24.54	Web	files wu 3
sanity #dom-clobbering #prototype-pollution #xss	AmateursCTF 2023	24.54	Web	files wu 2
urmombotnetdotnetcom_1 #error-based-info-disclosure #duplicate-registration	BYUCTF 2023	–	Web	files wu 1
php_sucks #php-file-upload-bypass #strtok-filename-truncation #rce	BackdoorCTF 2023	–	Web	files wu 1
codebox #web #xss #csp-bypass #trusted-types	DiceCTF 2023	36.70	Web	files wu 2
jnotes #web #cookie-injection #java-cookie-parsing #iframe-leak	DiceCTF 2023	36.70	Web	files wu 1
jwtjail #web #jwt #nodejs-vm-escape #sandbox-escape #toprimitive #rce	DiceCTF 2023	36.70	Web	files wu 1
proxed #x-forwarded-for	DownUnderCTF 2023	46.63	Web	files wu 1
Sharers_World #signed-exchange	HITCON 2023 Quals	99.75	Web	files wu 1
fancy-page #xss	HSCTF 2023	–	Web	files wu 3
mogodb #nosql-injection	HSCTF 2023	–	Web	files wu 3
very-secure #flask-session-forgery	HSCTF 2023	–	Web	files wu 2
west-side-story #json-injection	HSCTF 2023	–	Web	files wu 1
Awesomenotes_I #htmx-injection	Hack.lu 2023	94.73	Web	files wu 2
Awesomenotes_II #mxss	Hack.lu 2023	94.73	Web	files wu 1

Challenges