CTF challenges & writeups

2454 challenges · browse all techniques

Challenge	CTF	Weight	Category	Has
Based_Encoding #xss	Hack.lu 2023	94.73	Web	files wu 3
Referrrrer #referer-bypass	HeroCTF 2023	–	Web	files wu 1
Perfect_Picture #image-upload-bypass	ImaginaryCTF 2023	34.52	Web	files wu 3
blank #sql-injection	ImaginaryCTF 2023	34.52	Web	files wu 3
roks #lfi-double-encoding	ImaginaryCTF 2023	34.52	Web	files wu 2
california-state-police #csp-bypass-navigation	LA 2023	–	Web	files wu 2
hptla #xss-event-handler	LA 2023	–	Web	files wu 2
metaverse #xss-csrf-chain	LA 2023	–	Web	files wu 3
uuid-hell #uuid-prediction	LA 2023	–	Web	files wu 2
zero-trust #aes-gcm-nonce-reuse	LA 2023	–	Web	files wu 1
another-secure-store-note #dangling-markup	LINE 2023	–	Web	files wu 1
baby-simple-gocurl #x-forwarded-for-spoof	LINE 2023	–	Web	files wu 1
memento #thread-local-state-leak	LINE 2023	–	Web	files wu 1
BLADE_RUNNER #prototype-pollution	MapleCTF 2023	24.05	Web	files wu 1
Data_Explorer #order-by-sql-injection	MapleCTF 2023	24.05	Web	files wu 1
JUJUTSU_KAISEN_2 #esi-injection	MapleCTF 2023	24.05	Web	files wu 1
Transfer #sql-injection	NahamCon 2023	34.82	Web	files wu 1
Flower_Shop #command-injection #curl #webhook	PatriotCTF 2023	24.52	Web	files wu 1
0_CSP #crlf-injection #xss #cache-poisoning	Securinets 2023 Quals	65.42	Web	files wu 1
Chunky #request-smuggling #jwt #jwks-spoofing #cache-poisoning	SekaiCTF 2023	24.86	Web	files wu 1
Frog_WAF #ssti #waf-bypass #java-el-injection	SekaiCTF 2023	24.86	Web	files wu 1
Scanner_Service #command-injection #nmap	SekaiCTF 2023	24.86	Web	files wu 1
BABY_DUCKY_NOTES_REVENGE #xss	TFC 2023	–	Web	files wu 1
pay-to-win #brute-force	TJCTF 2023	–	Web	files wu 1
yolo #csp-bypass #predictable-nonce	TJCTF 2023	–	Web	files wu 1
Brainfxxk_Challenge #xss #csp-bypass	TSG 2023	–	Web	files wu 2
DANCE #aes-gcm #tag-forgery	TSG 2023	–	Web	files wu 3
Upside_down_cake #type-confusion #javascript	TSG 2023	–	Web	files wu 3
absurdres #xss #csp-bypass	TSG 2023	–	Web	files wu 2
GIFT #type-juggling #lfi (local-file-inclusion)#sql-injection	TetCTF 2023	53.89	Web	files wu 1
ImageServicesViewer #ssrf #prototype-pollution #url-parsing-bypass	TetCTF 2023	53.89	Web	files wu 2
adversal #css-injection #csp-bypass #data-exfiltration	WolvCTF 2023	24.33	Web	files wu 1
zombie-101 #xss #cookie-theft	WolvCTF 2023	24.33	Web	files wu 3
fishy-motd #stored-xss	b01lers 2023	36.84	Web	files wu 1
crabspace #ssti #webrtc #csp-bypass	corCTF 2023	36.97	Web	files wu 1
force #graphql-batching-attack #rate-limit-bypass	corCTF 2023	36.97	Web	files wu 3
frogshare #stored-xss #svg-xss	corCTF 2023	36.97	Web	files wu 1
msfrognymize #lfi (local-file-inclusion)#path-traversal #os-path-join	corCTF 2023	36.97	Web	files wu 1
Dangerous #x-forwarded-for	justCTF 2023	53.00	Web	files wu 2
eXtra_Safe_Security_layers #csp-bypass	justCTF 2023	53.00	Web	files wu 1

Challenges