CTF challenges & writeups

55 challenges in family ⊕ rev:windows ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
Dont_unpack_me #rc4 #pe-unpacking	Bhackari 2026	–	Reverse	files wu 1
triforce #v8-exploitation #jit #type-confusion	TRX 2026	–	Pwn	files wu 1
Ducks_Ping_Pong #windows-driver-reversing #ioctl #veh	V1T 2026	22.14	Reverse	files wu 1
cookie_recipes_v3 #web #type-confusion #parameter-pollution #express	DiceCTF 2025 Quals	81.00	Web	files wu 1
dummyhole #content-type-bypass #path-traversal #ssrf	SECCON 2025 Quals	–	Web	files wu 1
Captivating_Canvas_Contraption #prototype-pollution #wasm #sandbox-escape	SekaiCTF 2025	55.00	Web	files wu 1
Javascript_Puzzle #javascript-type-coercion #error-based-leak	WolvCTF 2025	47.25	Web	files wu 1
Positive_Players #prototype-pollution	justCTF 2025	97.20	Web	files wu 1
funnylogin #web #sql-injection #prototype-pollution #type-confusion	DiceCTF 2024 Quals	54.40	Web	files wu 3
Prisoner_Processor #prototype-pollution	DownUnderCTF 2024	68.04	Web	files wu 1
Game_Graphics_Debugging #dll-hijacking #tls-callback #xor	WolvCTF 2024	35.25	Reverse	files wu 2
gimme_csp #csp-bypass #content-type-confusion #xss	ASIS 2023 Finals	89.80	Web	files wu 1
sanity #dom-clobbering #prototype-pollution #xss	AmateursCTF 2023	24.54	Web	files wu 2
BLADE_RUNNER #prototype-pollution	MapleCTF 2023	24.05	Web	files wu 1
Upside_down_cake #type-confusion #javascript	TSG 2023	–	Web	files wu 3
GIFT #type-juggling #lfi (local-file-inclusion)#sql-injection	TetCTF 2023	53.89	Web	files wu 1
ImageServicesViewer #ssrf #prototype-pollution #url-parsing-bypass	TetCTF 2023	53.89	Web	files wu 2
EtherealCrackme #windows-reversing #anti-analysis	VishwaCTF 2023	22.69	Reverse	files wu 1
cakegear #php-type-juggling #auth-bypass	CakeCTF 2022	–	Web	files wu 1
panda_memo #prototype-pollution #cve-2022-21824	CakeCTF 2022	–	Web	files wu 1
typed #rust-type-system #z3 #reversing	DiceCTF 2022	24.82	Reverse	files wu 1
vm-calc #web #prototype-pollution #nodejs-vm #proxy	DiceCTF 2022	24.82	Web	files wu 1
Fly #swipe-typing #keyboard-trace	PatriotCTF 2022	24.52	Crypto	files wu 1
username_generator #javascript-scope-pollution #xss	SEETF 2022	–	Web	files wu 1
Juggler #type-juggling #php	UACTF 2022	–	Web	files wu 1
rustshop #type-confusion #unsafe-deserialization	corCTF 2022	24.92	Web	files wu 1
service #windows-reversing #cryptoapi #aes	zer0pts 2022	35.97	Reverse	files wu 1
MissingFlavortext #web #sqlite-injection #type-juggling #filter-bypass	DiceCTF 2021	24.82	Web	files wu 3
babychrome #v8-turbofan-type-confusion	LINE 2021	–	Pwn	files wu 1
unionized #union-type-confusion	MetaCTF 2021	–	Pwn	files wu 2
Plaid_Party_Planning_IV #ocaml-type-confusion #float-unboxing	PlaidCTF 2021	99.64	Web	files wu 1
Secure_OCaml_Sandbox #ocaml-sandbox-escape #callback-register #type-confusion	PlaidCTF 2021	99.64	Pwn	files wu 2
Wowza #race-condition #prototype-pollution #ssrf	PlaidCTF 2021	99.64	Web	files wu 2
giita #prototype-pollution #xss	TSG 2021	–	Web	files wu 1
Painting_Windows #anti-debugging #xor #windows-reversing	UMDCTF 2021	–	Reverse	files wu 1
Sabloom_Text_6 #crackme #windows-reversing #xor #maze-solving	Zh3r0 2021	–	Reverse	files src wu 1
styleme #xs-leak #prototype-pollution #css-injection	corCTF 2021	24.92	Web	files wu 1
fancy-notes #prototype-pollution	idekCTF 2021	24.56	Web	files wu 1
baby_sqli #sql-injection #sqlite #escape-bypass #authentication-bypass	zer0pts 2021	24.56	Web	files wu 2
thats_a_lot_of_fish #typescript-type-system #custom-vm	PlaidCTF 2020	93.15	Reverse	files wu 2

Challenges