CTF challenges & writeups

273 challenges in family ⊕ pwn:control-flow ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
Return_to_Lose #ret2win	LYKNCTF 2026	–	Pwn	files wu 1
doMonkeysSwim #static-rop #stack-buffer-overflow #stack-pivot #syscall	RITSEC 2026	–	Pwn	files wu 1
oboe #kernel #heap-overflow #off-by-one #use-after-free (uaf)#rop #commit-creds #kpti-bypass	DiceCTF 2025 Quals	81.00	Pwn	files wu 1
Retro2Win #stack-buffer-overflow #ret2win	1337UP 2024	–	Pwn	files wu 1
RunningOnPrayers #ret2shellcode	JerseyCTF 2024	21.26	Pwn	files wu 2
aplet123 #ret2win	LA 2024	–	Pwn	files wu 1
Titusville #rop #ret2syscall #ropchain	SunshineCTF 2024	38.57	Misc	files wu 1
bench_225 #format-string #rop #pie-leak	UMassCTF 2024	43.10	Pwn	files wu 1
basic_overflow #bof #ret2win	UofTCTF 2024	23.90	Pwn	files wu 2
patched_shell #bof #ret2win	UofTCTF 2024	23.90	Pwn	files wu 1
Game_CET_Match #negative-index #got-overwrite #rop	WolvCTF 2024	35.25	Pwn	files wu 1
kowaiiVm #jit-toctou #rop	bi0sCTF 2024	79.83	Pwn	files wu 1
virtio_note #qemu-oob #rop	bi0sCTF 2024	79.83	Pwn	files wu 2
ROP_til_you_drop #rop #format-string	BCACTF 2023	–	Pwn	files wu 1
popcorn #heap #use-after-free (uaf)#function-pointer-overwrite #ret2win	DeadSec 2023	23.96	Pwn	files wu 1
Easy_Peasy #stack-buffer-overflow #ret2win	DeconstruCT.F 2023	11.23	Pwn	files wu 1
baby_bof #stack-buffer-overflow #gets #ret2win	Defcamp 2023 Quals	–	Pwn	files wu 1
bistro #stack-buffer-overflow #gets #rop	Defcamp 2023 Quals	–	Pwn	files wu 1
bistro_v2 #stack-buffer-overflow #gets #rop	Defcamp 2023 Quals	–	Pwn	files wu 1
book #oob-index #arbitrary-read-write #got-overwrite #ret2libc	Defcamp 2023 Quals	–	Pwn	files wu 1
system_write #format-string #buffer-overflow #got-overwrite	Defcamp 2023 Quals	–	Pwn	files wu 1
bop #stack-buffer-overflow #gets #seccomp #orw #rop	DiceCTF 2023	36.70	Pwn	files wu 3
ed #ret2win	HSCTF 2023	–	Pwn	files wu 1
Rope_Dancer #srop	HeroCTF 2023	–	Pwn	files wu 1
redact #ret2win	LA 2023	–	Pwn	files wu 2
stuff #ret2libc	LA 2023	–	Pwn	files wu 1
hackatris #rop-ret2libc	LINE 2023	–	Pwn	files wu 3
Open_Sesame #ret2win	NahamCon 2023	34.82	Pwn	files wu 3
selfcet #buffer-overflow #cet-bypass #srop	SECCON 2023 Quals	100.00	Pwn	files wu 1
groppling-hook #rop	TJCTF 2023	–	Pwn	files wu 1
BingChilling #rop #loongarch64 #bof	UTCTF 2023	–	Pwn	files wu 1
echo2 #partial-overwrite #ret2libc	WolvCTF 2023	24.33	Pwn	files wu 2
ASM #srop	n00bzCTF 2023	15.12	Pwn	files wu 3
Pwn1 #ret2win	n00bzCTF 2023	15.12	Pwn	files wu 2
Pwn2 #ret2plt-system	n00bzCTF 2023	15.12	Pwn	files wu 2
Pwn3 #ret2libc	n00bzCTF 2023	15.12	Pwn	files wu 2
Cake #off-by-one #rbp-lsb-overwrite #stack-pivot #shellcode	1337UP 2022	22.49	Pwn	files wu 1
Jump_Rope #ret2win	BCACTF 2022	–	Pwn	files wu 2
welkerme #kernel-exploit #arbitrary-function-call #ret2usr	CakeCTF 2022	–	Pwn	files wu 1
blindsight #blind-rop #brop #stack-buffer-overflow	Defcamp 2022	–	Pwn	files wu 2

Challenges