CTF challenges & writeups

123 challenges in family ⊕ web:other ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
jwtjail #web #jwt #nodejs-vm-escape #sandbox-escape #toprimitive #rce	DiceCTF 2023	36.70	Web	files wu 1
proxed #x-forwarded-for	DownUnderCTF 2023	46.63	Web	files wu 1
west-side-story #json-injection	HSCTF 2023	–	Web	files wu 1
Awesomenotes_I #htmx-injection	Hack.lu 2023	94.73	Web	files wu 2
Referrrrer #referer-bypass	HeroCTF 2023	–	Web	files wu 1
uuid-hell #uuid-prediction	LA 2023	–	Web	files wu 2
baby-simple-gocurl #x-forwarded-for-spoof	LINE 2023	–	Web	files wu 1
JUJUTSU_KAISEN_2 #esi-injection	MapleCTF 2023	24.05	Web	files wu 1
Flower_Shop #command-injection #curl #webhook	PatriotCTF 2023	24.52	Web	files wu 1
Chunky #request-smuggling #jwt #jwks-spoofing #cache-poisoning	SekaiCTF 2023	24.86	Web	files wu 1
Scanner_Service #command-injection #nmap	SekaiCTF 2023	24.86	Web	files wu 1
ImageServicesViewer #ssrf #prototype-pollution #url-parsing-bypass	TetCTF 2023	53.89	Web	files wu 2
adversal #css-injection #csp-bypass #data-exfiltration	WolvCTF 2023	24.33	Web	files wu 1
crabspace #ssti #webrtc #csp-bypass	corCTF 2023	36.97	Web	files wu 1
force #graphql-batching-attack #rate-limit-bypass	corCTF 2023	36.97	Web	files wu 3
Dangerous #x-forwarded-for	justCTF 2023	53.00	Web	files wu 2
1_truth_2_lies #ssti #jinja2 #python	1337UP 2022	22.49	Web	files wu 1
openbio #angularjs-csti #csp-bypass	CakeCTF 2022	–	Web	files wu 1
panda_memo #prototype-pollution #cve-2022-21824	CakeCTF 2022	–	Web	files wu 1
flare #web #cve-2022-23632 #mtls-bypass	DiceCTF 2022	24.82	Web	files wu 1
knock-knock #web #hmac-forgery #predictable-secret #nodejs	DiceCTF 2022	24.82	Web	files wu 3
vm-calc #web #prototype-pollution #nodejs-vm #proxy	DiceCTF 2022	24.82	Web	files wu 1
htpl #ast-injection	Hack.lu 2022	93.70	Web	files wu 1
heres-my-password #password-spraying	JerseyCTF 2022	25.00	Web	files wu 2
Personnel #regex-injection	NahamCon 2022	24.61	Web	files wu 3
ExcellentDatabase #excel-formula-injection #csv-injection #libreoffice	PatriotCTF 2022	24.52	Web	files wu 2
TaaS #tar-symlink #race-condition	PatriotCTF 2022	24.52	Web	files wu 1
analects #sql-injection #charset-bypass	TJCTF 2022	–	Web	files wu 1
viewy #ssti #ejs	TJCTF 2022	–	Web	files wu 1
Juggler #type-juggling #php	UACTF 2022	–	Web	files wu 1
simplewaf #parameter-object-injection #file-url-bypass	corCTF 2022	24.92	Web	files wu 1
gitfile_explorer #ssrf #path-traversal #file-scheme	zer0pts 2022	35.97	Web	files wu 1
WebIDE #web #js-sandbox-escape #service-workers #cookie-path-bypass	DiceCTF 2021	24.82	Web	files wu 3
Plaid_Party_Planning_IV #ocaml-type-confusion #float-unboxing	PlaidCTF 2021	99.64	Web	files wu 1
Easyphp #url-decode-discrepancy #auth-bypass #double-encoding	RCTF 2021	–	Web	files wu 1
ns_shaft_sql #error-based-sqli #mysql	RCTF 2021	–	Web	files wu 1
junior-jwt #jwt #algorithm-confusion #rs256-to-hs256	S4CTF 2021	24.52	Web	files wu 1
delfi #lfi (local-file-inclusion)#proc-memory-read	TAMUctf 2021	–	Web	files wu 1
ponydb #sql-injection #sql-truncation	UIUCTF 2021	–	Web	files wu 1
pwnyIDE #ssrf #ftp	UIUCTF 2021	–	Web	files wu 1

Challenges