CTF challenges & writeups

27 challenges in family ⊕ web:client-side ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
Rush_Hour #xss #cookie-theft #cors-bypass	UMassCTF 2025	48.38	Web	files wu 1
calculator #web #xss #eval #typescript #no-csp	DiceCTF 2024 Quals	54.40	Web	files wu 1
ctf_wiki #csp-img-exfiltration	LA 2024	–	Web	files wu 1
Tagless #xss #csp-bypass #mime-sniffing	SekaiCTF 2024	36.96	Web	files wu 1
htmlsandbox #xss #csp-bypass #charset-confusion	SekaiCTF 2024	36.96	Web	files wu 1
Variety_Notes #redos #csp-bypass	bi0sCTF 2024	79.83	Web	files wu 1
corctf_challenge_dev #stored-xss #csp-bypass #extension-exploitation	corCTF 2024	55.00	Web	files wu 1
gimme_csp #csp-bypass #content-type-confusion #xss	ASIS 2023 Finals	89.80	Web	files wu 1
codebox #web #xss #csp-bypass #trusted-types	DiceCTF 2023	36.70	Web	files wu 2
california-state-police #csp-bypass-navigation	LA 2023	–	Web	files wu 2
another-secure-store-note #dangling-markup	LINE 2023	–	Web	files wu 1
yolo #csp-bypass #predictable-nonce	TJCTF 2023	–	Web	files wu 1
Brainfxxk_Challenge #xss #csp-bypass	TSG 2023	–	Web	files wu 2
absurdres #xss #csp-bypass	TSG 2023	–	Web	files wu 2
adversal #css-injection #csp-bypass #data-exfiltration	WolvCTF 2023	24.33	Web	files wu 1
crabspace #ssti #webrtc #csp-bypass	corCTF 2023	36.97	Web	files wu 1
eXtra_Safe_Security_layers #csp-bypass	justCTF 2023	53.00	Web	files wu 1
openbio #angularjs-csti #csp-bypass	CakeCTF 2022	–	Web	files wu 1
umassdining #dom-based-xss #csp-bypass #double-encoding	UMassCTF 2022	23.56	Web	files wu 2
BabierCSP #web #csp-bypass #xss #cookie-theft	DiceCTF 2021	24.82	Web	files wu 3
Flags #html-injection #css-injection #csp-bypass #data-exfiltration	Zh3r0 2021	–	Web	files wu 1
blogme #csp-bypass #dom-clobbering #service-worker	corCTF 2021	24.92	Web	files wu 1
simple_blog #xss #csp-bypass #trusted-types	zer0pts 2021	24.56	Web	files wu 3
Conspiracy_Social #web #xss #websocket #admin-bot-token-theft #csp-bypass	CyberSecurityRumble 2024 Quals	100.00	Web	files wu 1
Super_Admin_Panel #xss #csrf	TeamItaly 2023	24.88	Web	files wu 1
GoogleWayback #xss #csrf	WeCTF 2022	36.12	Misc	files wu 1
Coin_Exchange #csrf #cors-misconfiguration	WeCTF 2021	25.00	Misc	files wu 1

Challenges