$ ctf42

Challenges

Category
Difficulty
CTFtime weight
–
Higher weight ≈ harder, more prestigious event.
Year
–
Must have
Reset

355 challenges in family ⊕ web ✕ clear · browse all techniques

Challenge CTF Weight Category Has
Proxyproxy
#lighttpd-proxy-bypass
 Bhackari 2026 – Web files wu 1
FU_Career
#sql-injection-into-outfile
 LYKNCTF 2026 – Web files wu 1
Blinky
#pointer-authentication#speculative-execution#cache-side-channel#mips
 R3CTF 2026 35.95 Misc files wu 1
Tsukis_Rhythm_Game
#pyinstaller#aes-cbc#marshal-bytecode#malware-c2
 R3CTF 2026 35.95 Misc files wu 1
MSN_Revive
#idor#broken-access-control
 Srdnlen 2026 Quals 34.76 Web files wu 2
Junkiness
#mass-assignment#privilege-escalation
 TRX 2026 – Web files wu 1
Pixel_Perfect
#arbitrary-file-upload#rce
 TRX 2026 – Web files wu 1
Duck_Nettool_Revenge
#filter-bypass#glob-expansion#command-injection
 V1T 2026 22.14 Web files wu 1
ant_universe
#bcrypt-truncation#authentication-bypass
 VuwCTF 2026 25.00 Web files wu 1
just_download_it
#path-traversal#lfi (local-file-inclusion)
 VuwCTF 2026 25.00 Web files wu 1
Escatlate_flag_1
#mass-assignment#insecure-role-assignment#broken-access-control
 1753CTF 2025 34.82 Web files wu 1
Escatlate_flag_2
#unicode-case-mapping-bypass#touppercase-tolowercase-normalization
 1753CTF 2025 34.82 Web files wu 1
cookie_recipes_v3
#web#type-confusion#parameter-pollution#express
 DiceCTF 2025 Quals 81.00 Web files wu 1
safestnote
#web#css-injection#bfcache#form-state-restoration
 DiceCTF 2025 Quals 81.00 Web files wu 1
Request_Handling
#ast-injection
 DownUnderCTF 2025 91.66 Web files wu 1
webwebhookhook
#dns-rebinding
 IrisCTF 2025 34.30 Web files wu 1
Layers_of_Lies
#php-wrappers
 JerseyCTF 2025 24.73 Web files wu 1
whats_your_number
#tcp-sequence-prediction
 JerseyCTF 2025 24.73 Web files wu 1
Knight_Connect
#login-link-forgery
 KnightCTF 2025 18.78 Web files wu 1
GitBad
#git-submodule-hook-rce
 L3akCTF 2025 24.43 Web files wu 1
certay_revenge
#php-eval-filter-bypass
 L3akCTF 2025 24.43 Web files wu 1
arclbroth
#null-byte-injection
 LA 2025 – Web files wu 1
mavs_fan
#xss-cookie-httponly-bypass
 LA 2025 – Web files wu 1
purell
#xss-sanitizer-bypass
 LA 2025 – Web files wu 1
airspeed
#airspeed-ssti#velocity-template#nginx-path-normalization-bypass
 QnQSec 2025 24.76 Web files wu 1
dummyhole
#content-type-bypass#path-traversal#ssrf
 SECCON 2025 Quals – Web files wu 1
Puzzle
#idor#privilege-escalation#info-disclosure
 Securinets CTF 2025 Quals – Web files wu 1
Average_HTTP_3_Enjoyer
#http3#quic
 Srdnlen 2025 – Web files wu 1
Ben_10
#sql-injection
 Srdnlen 2025 – Web files wu 1
Contamination
#proxy-bypass#parser-differential
 SwampCTF 2025 40.40 Web files wu 1
Editor
#html-injection#local-file-read
 SwampCTF 2025 40.40 Web files wu 3
Serialies
#insecure-deserialization#java
 SwampCTF 2025 40.40 Web files wu 1
Are_you_incognito
#browser-extension#dom-clobbering
 TPCTF 2025 – Web files wu 1
baby_layout
#dompurify-bypass#xss
 TPCTF 2025 – Web files wu 1
safe_layout_revenge
#dompurify-bypass#mutation-xss
 TPCTF 2025 – Web files wu 1
Rush_Hour
#xss#cookie-theft#cors-bypass
 UMassCTF 2025 48.38 Web files wu 1
Rush_Hour_v2
#xss#cookie-theft
 UMassCTF 2025 48.38 Web files wu 1
Art_Contest
#file-upload#php-filter-bypass#suid
 WolvCTF 2025 47.25 Web files wu 1
Limited_1
#sql-injection#union-based#filter-bypass
 WolvCTF 2025 47.25 Web files wu 1
ExploitMe
#mass-assignment
 snakeCTF 2025 Quals 36.65 Web files wu 1