CTF challenges & writeups

2461 challenges · browse all techniques

Challenge	CTF	Weight	Category	Has
TaaS #tar-symlink #race-condition	PatriotCTF 2022	24.52	Web	files wu 1
ZaaS #zip-slip #path-traversal	PatriotCTF 2022	24.52	Web	files wu 1
piyosay #dompurify #html-injection	SECCON 2022 Quals	97.90	Web	files wu 1
charlottes_web #prototype-pollution #off-by-one #chrome-extension	SEETF 2022	–	Web	files wu 1
flagportal #request-smuggling #reverse-proxy-misconfiguration	SEETF 2022	–	Web	files wu 1
log4security #deserialization #log-injection	SEETF 2022	–	Web	files wu 1
username_generator #javascript-scope-pollution #xss	SEETF 2022	–	Web	files wu 1
xspwn #use-after-free (uaf)#xs-leak	SEETF 2022	–	Web	files wu 1
NarutoKeeper #xss #meta-redirect	Securinets 2022 Quals	50.11	Web	files wu 1
ObligatoryCalc #xss #sanitizer-api #dompurify	SekaiCTF 2022	24.86	Web	files wu 1
LocalCardMaker #lfi (local-file-inclusion)#php-rce	THCon 2022	–	Web	files wu 1
analects #sql-injection #charset-bypass	TJCTF 2022	–	Web	files wu 1
ascordle #sql-injection	TJCTF 2022	–	Web	files wu 1
fleecebook #xss	TJCTF 2022	–	Web	files wu 1
fruit-store #business-logic-flaw	TJCTF 2022	–	Web	files wu 1
game-leaderboard #sql-injection	TJCTF 2022	–	Web	files wu 3
jokster #xss	TJCTF 2022	–	Web	files wu 1
mmocc #path-traversal	TJCTF 2022	–	Web	files wu 2
photoable #path-traversal	TJCTF 2022	–	Web	files wu 1
viewy #ssti #ejs	TJCTF 2022	–	Web	files wu 1
Juggler #type-juggling #php	UACTF 2022	–	Web	files wu 1
spoink #ssti #pebble #spring-boot	UIUCTF 2022	–	Web	files wu 1
woeby #csrf #blind-sql-injection	UIUCTF 2022	–	Web	files wu 1
umassdining #dom-based-xss #csp-bypass #double-encoding	UMassCTF 2022	23.56	Web	files wu 2
Sigma #wasm-exploitation #buffer-overflow #xss	UTCTF 2022	–	Web	files wu 1
modernblog #dom-clobbering #css-leak	corCTF 2022	24.92	Web	files wu 2
rustshop #type-confusion #unsafe-deserialization	corCTF 2022	24.92	Web	files wu 1
simplewaf #parameter-object-injection #file-url-bypass	corCTF 2022	24.92	Web	files wu 1
archived #stored-xss	hxp 2022	–	Web	files wu 2
sqlite_web #sqlite-rce	hxp 2022	–	Web	files wu 2
valentine #ssti	hxp 2022	–	Web	files wu 3
Vault #xss #csrf	insomnihack 2022 Quals	21.38	Web	files wu 1
BabyXSLeak #xs-leak	justCTF 2022	35.66	Web	files wu 1
dumbforum #jinja2-ssti	m0leCon 2022 Quals	36.00	Web	files wu 1
gitfile_explorer #ssrf #path-traversal #file-scheme	zer0pts 2022	35.97	Web	files wu 1
miniblog++ #ssti #jinja2 #filter-bypass	zer0pts 2022	35.97	Web	files wu 1
amazing-crypto-waf #sql-injection #waf-bypass	ALLES 2021	–	Web	files wu 1
ascii_art_as_a_service #jp2a #arbitrary-file-write	ASIS 2021 Quals	89.22	Web	files wu 3
lovely_nonces #xss #csp-nonce-bypass	ASIS 2021 Quals	89.22	Web	files wu 2
welcome #xss #recaptcha-bypass	ASIS 2021 Finals	89.22	Web	files wu 1

Challenges