CTF challenges & writeups

2454 challenges · browse all techniques

Challenge	CTF	Weight	Category	Has
photoable #path-traversal	TJCTF 2022	–	Web	files wu 1
viewy #ssti #ejs	TJCTF 2022	–	Web	files wu 1
Juggler #type-juggling #php	UACTF 2022	–	Web	files wu 1
umassdining #dom-based-xss #csp-bypass #double-encoding	UMassCTF 2022	23.56	Web	files wu 2
Sigma #wasm-exploitation #buffer-overflow #xss	UTCTF 2022	–	Web	files wu 1
modernblog #dom-clobbering #css-leak	corCTF 2022	24.92	Web	files wu 2
rustshop #type-confusion #unsafe-deserialization	corCTF 2022	24.92	Web	files wu 1
simplewaf #parameter-object-injection #file-url-bypass	corCTF 2022	24.92	Web	files wu 1
archived #stored-xss	hxp 2022	–	Web	files wu 2
sqlite_web #sqlite-rce	hxp 2022	–	Web	files wu 2
valentine #ssti	hxp 2022	–	Web	files wu 3
BabyXSLeak #xs-leak	justCTF 2022	35.66	Web	files wu 1
dumbforum #jinja2-ssti	m0leCon 2022 Quals	36.00	Web	files wu 1
gitfile_explorer #ssrf #path-traversal #file-scheme	zer0pts 2022	35.97	Web	files wu 1
miniblog++ #ssti #jinja2 #filter-bypass	zer0pts 2022	35.97	Web	files wu 1
amazing-crypto-waf #sql-injection #waf-bypass	ALLES 2021	–	Web	files wu 1
lovely_nonces #xss #csp-nonce-bypass	ASIS 2021 Quals	89.22	Web	files wu 2
Gerald_Catalog #web-push-leak	BCACTF 2021	–	Web	files wu 1
Movie-Login-2 #sql-injection	BCACTF 2021	–	Web	files wu 3
Movie-Login-3 #sql-injection	BCACTF 2021	–	Web	files wu 3
Stylish #css-injection	BCACTF 2021	–	Web	files wu 1
Gatekeeping #web #nginx-gunicorn-path-bypass #access-control-bypass	CSAW 2021 Quals	20.54	Web	files wu 3
super-secure-translation-implementation #ssti #jinja2 #filter-bypass	DamCTF 2021	24.43	Web	files wu 3
BabierCSP #web #csp-bypass #xss #cookie-theft	DiceCTF 2021	24.82	Web	files wu 3
MissingFlavortext #web #sqlite-injection #type-juggling #filter-bypass	DiceCTF 2021	24.82	Web	files wu 3
WebIDE #web #js-sandbox-escape #service-workers #cookie-path-bypass	DiceCTF 2021	24.82	Web	files wu 3
WebUtils #web #xss #nodejs #cookie-theft	DiceCTF 2021	24.82	Web	files wu 3
build-a-panel #web #sql-injection #nodejs #admin-bot	DiceCTF 2021	24.82	Web	files wu 3
Notepad #dompurify-bypass	DownUnderCTF 2021	–	Web	files wu 2
grading #idor	HSCTF 2021	–	Web	files wu 3
message-board #cookie-tampering	HSCTF 2021	–	Web	files wu 3
NodeNB #race-condition	Hack.lu 2021	94.48	Web	files wu 1
SeekingExploits #second-order-sqli	Hack.lu 2021	94.48	Web	files wu 1
diamond-safe #sql-injection	Hack.lu 2021	94.48	Web	files wu 2
Awkward_Bypass #blind-sql-injection	ImaginaryCTF 2021	–	Web	files wu 1
Build-A-Website #ssti	ImaginaryCTF 2021	–	Web	files wu 3
Cookie_Stream #stream-cipher-bitflip	ImaginaryCTF 2021	–	Web	files wu 1
SaaS #sed-command-injection	ImaginaryCTF 2021	–	Web	files wu 3
Sinking_Calculator #ssti	ImaginaryCTF 2021	–	Web	files wu 1
YourNote #xs-leak	LINE 2021	–	Web	files wu 1

Challenges