CTF challenges & writeups

2454 challenges · browse all techniques

Challenge	CTF	Weight	Category	Has
Conditions #unicode-case-expansion	n00bzCTF 2023	15.12	Web	files wu 1
1_truth_2_lies #ssti #jinja2 #python	1337UP 2022	22.49	Web	files wu 1
DeadTube #ssrf #dns-rebinding #blacklist-bypass	1337UP 2022	22.49	Web	files wu 1
raas-v1 #curl-argument-injection #local-file-read #ssrf	ASIS 2022 Finals	87.00	Web	files wu 1
Wordle #hash-precomputation #unsalted-md5	BYUCTF 2022	–	Web	files wu 1
cakegear #php-type-juggling #auth-bypass	CakeCTF 2022	–	Web	files wu 1
openbio #angularjs-csti #csp-bypass	CakeCTF 2022	–	Web	files wu 1
panda_memo #prototype-pollution #cve-2022-21824	CakeCTF 2022	–	Web	files wu 1
blazingfast #web #xss #unicode-normalization	DiceCTF 2022	24.82	Web	files wu 2
flare #web #cve-2022-23632 #mtls-bypass	DiceCTF 2022	24.82	Web	files wu 1
knock-knock #web #hmac-forgery #predictable-secret #nodejs	DiceCTF 2022	24.82	Web	files wu 3
no-cookies #web #sql-injection #xss #regexp-input-leak	DiceCTF 2022	24.82	Web	files wu 1
vm-calc #web #prototype-pollution #nodejs-vm #proxy	DiceCTF 2022	24.82	Web	files wu 1
gallery #path-traversal	HSCTF 2022	–	Web	files wu 2
hsgtf #xs-leak	HSCTF 2022	–	Web	files wu 1
markdown-plus-plus #css-injection	HSCTF 2022	–	Web	files wu 1
png-wizard #command-injection	HSCTF 2022	–	Web	files wu 1
png-wizard-v2 #imagemagick	HSCTF 2022	–	Web	files wu 1
htpl #ast-injection	Hack.lu 2022	93.70	Web	files wu 1
apache-logs #log-analysis	JerseyCTF 2022	25.00	Web	files wu 2
heres-my-password #password-spraying	JerseyCTF 2022	25.00	Web	files wu 2
bb #dom-clobbering	LINE 2022	–	Web	files wu 1
gotm #go-template-ssti	LINE 2022	–	Web	files wu 3
hariboteSecureNote #csp-nonce-bypass	LINE 2022	–	Web	files wu 1
online-library #path-traversal-lfi	LINE 2022	–	Web	files wu 1
title_todo #scroll-to-text-fragment-leak	LINE 2022	–	Web	files wu 1
Personnel #regex-injection	NahamCon 2022	24.61	Web	files wu 3
ExcellentDatabase #excel-formula-injection #csv-injection #libreoffice	PatriotCTF 2022	24.52	Web	files wu 2
TaaS #tar-symlink #race-condition	PatriotCTF 2022	24.52	Web	files wu 1
ZaaS #zip-slip #path-traversal	PatriotCTF 2022	24.52	Web	files wu 1
username_generator #javascript-scope-pollution #xss	SEETF 2022	–	Web	files wu 1
NarutoKeeper #xss #meta-redirect	Securinets 2022 Quals	50.11	Web	files wu 1
LocalCardMaker #lfi (local-file-inclusion)#php-rce	THCon 2022	–	Web	files wu 1
analects #sql-injection #charset-bypass	TJCTF 2022	–	Web	files wu 1
ascordle #sql-injection	TJCTF 2022	–	Web	files wu 1
fleecebook #xss	TJCTF 2022	–	Web	files wu 1
fruit-store #business-logic-flaw	TJCTF 2022	–	Web	files wu 1
game-leaderboard #sql-injection	TJCTF 2022	–	Web	files wu 3
jokster #xss	TJCTF 2022	–	Web	files wu 1
mmocc #path-traversal	TJCTF 2022	–	Web	files wu 2

Challenges