$ ctf42

Challenges

Category
Difficulty
CTFtime weight
–
Higher weight ≈ harder, more prestigious event.
Year
–
Must have
Reset

123 challenges in family ⊕ web:other ✕ clear · browse all techniques

Challenge CTF Weight Category Has
Proxyproxy
#lighttpd-proxy-bypass
 Bhackari 2026 – Web files wu 1
Duck_Nettool_Revenge
#filter-bypass#glob-expansion#command-injection
 V1T 2026 22.14 Web files wu 1
ant_universe
#bcrypt-truncation#authentication-bypass
 VuwCTF 2026 25.00 Web files wu 1
Escatlate_flag_1
#mass-assignment#insecure-role-assignment#broken-access-control
 1753CTF 2025 34.82 Web files wu 1
Escatlate_flag_2
#unicode-case-mapping-bypass#touppercase-tolowercase-normalization
 1753CTF 2025 34.82 Web files wu 1
safestnote
#web#css-injection#bfcache#form-state-restoration
 DiceCTF 2025 Quals 81.00 Web files wu 1
Request_Handling
#ast-injection
 DownUnderCTF 2025 91.66 Web files wu 1
whats_your_number
#tcp-sequence-prediction
 JerseyCTF 2025 24.73 Web files wu 1
arclbroth
#null-byte-injection
 LA 2025 – Web files wu 1
Puzzle
#idor#privilege-escalation#info-disclosure
 Securinets CTF 2025 Quals – Web files wu 1
Average_HTTP_3_Enjoyer
#http3#quic
 Srdnlen 2025 – Web files wu 1
Contamination
#proxy-bypass#parser-differential
 SwampCTF 2025 40.40 Web files wu 1
Are_you_incognito
#browser-extension#dom-clobbering
 TPCTF 2025 – Web files wu 1
Art_Contest
#file-upload#php-filter-bypass#suid
 WolvCTF 2025 47.25 Web files wu 1
Limited_1
#sql-injection#union-based#filter-bypass
 WolvCTF 2025 47.25 Web files wu 1
b_locked
#race-condition#captcha-bypass
 snakeCTF 2025 Quals 36.65 Web files wu 2
BioCorp
#header-ip-spoofing#access-control-bypass#xxe
 1337UP 2024 – Web files wu 1
SafeNotes_2.0
#client-side-path-traversal#cspt
 1337UP 2024 – Web files wu 1
calculator
#web#xss#eval#typescript#no-csp
 DiceCTF 2024 Quals 54.40 Web files wu 1
co2v2
#class-pollution
 DownUnderCTF 2024 68.04 Web files wu 1
runner_net
#user-agent-spoofing
 JerseyCTF 2024 21.26 Web files wu 1
pogn
#client-side-trust
 LA 2024 – Web files wu 1
Boom_Boom_Hell
#bun-shell-injection
 LINE 2024 – Web files wu 1
Heritage
#http-request-splitting
 LINE 2024 – Web files wu 1
jalyboy_jalygirl
#cve-2022-21449
 LINE 2024 – Web files wu 1
Tagless
#xss#csp-bypass#mime-sniffing
 SekaiCTF 2024 36.96 Web files wu 1
htmlsandbox
#xss#csp-bypass#charset-confusion
 SekaiCTF 2024 36.96 Web files wu 1
Log_Action
#ssrf#cve-2024-34351
 UIUCTF 2024 – Web files wu 3
pwnypass
#css-injection#browser-extension
 UIUCTF 2024 – Web files wu 1
Crabby_Clicker
#http-pipelining#race-condition
 UMassCTF 2024 43.10 Web files wu 1
imagehost
#jwt-kid-path-traversal#rs256-key-confusion#auth-bypass
 b01lers 2024 30.80 Web files wu 1
Image_gallery_1
#xss#bfcache
 bi0sCTF 2024 79.83 Web files wu 2
Image_gallery_2
#dom-clobbering#cache-probing
 bi0sCTF 2024 79.83 Web files wu 1
Variety_Notes
#redos#csp-bypass
 bi0sCTF 2024 79.83 Web files wu 1
corctf_challenge_dev
#stored-xss#csp-bypass#extension-exploitation
 corCTF 2024 55.00 Web files wu 1
flarenotes_revenge
#xss#dompurify-bypass#cloudflare-bypass
 vsCTF 2024 34.00 Web files wu 1
funny_factorials
#lfi (local-file-inclusion)#path-normalization-bypass#flask
 AmateursCTF 2023 24.54 Web files wu 3
urmombotnetdotnetcom_1
#error-based-info-disclosure#duplicate-registration
 BYUCTF 2023 – Web files wu 1
php_sucks
#php-file-upload-bypass#strtok-filename-truncation#rce
 BackdoorCTF 2023 – Web files wu 1
codebox
#web#xss#csp-bypass#trusted-types
 DiceCTF 2023 36.70 Web files wu 2