CTF challenges & writeups

123 challenges in family ⊕ web:other ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
yana #subdomain-takeover #xs-leak	UIUCTF 2021	–	Web	files wu 2
flask-admin #broken-access-control #path-normalization	VolgaCTF 2021 Quals	32.73	Web	files wu 2
Flags #html-injection #css-injection #csp-bypass #data-exfiltration	Zh3r0 2021	–	Web	files wu 1
blogme #csp-bypass #dom-clobbering #service-worker	corCTF 2021	24.92	Web	files wu 1
buyme #mass-assignment #object-spread-injection	corCTF 2021	24.92	Web	files wu 3
simple_blog #xss #csp-bypass #trusted-types	zer0pts 2021	24.56	Web	files wu 3
ContrivedWebProblem #ssrf #ftp-crlf-injection #rabbitmq #nodemailer-attachment	PlaidCTF 2020	93.15	Web	files wu 3
security-scanner #memcache-injection	hxp 2020	94.00	Web	files wu 1
Awklet #path-traversal #awk-cgi	BuckeyeCTF 2025	–	Web	files wu 1
gamblecore #parseint-coercion-bug	LakeCTF 2025 Quals	–	Web	files wu 1
Bubble_Tea_Diaries #stored-xss #bbcode-parser #html-escape-bypass #jwt	SAS 2025 Quals	20.72	Web	files wu 1
Drift_Chat #broken-access-control #missing-return #go	SAS 2025 Quals	20.72	Web	files wu 1
Proxy #ssrf #caddy-admin-api #log-injection #rce	SAS 2025 Quals	20.72	Web	files wu 1
bigbabycode #mceliece #hamming-code #error-correction	SAS 2025 Quals	20.72	Web	files wu 1
0FA #ja3-tls-fingerprint-spoofing	Balsn 2023	79.09	Web	files wu 1
SaaS #nginx-server-name-bypass #json-schema-ajv-exploitation	Balsn 2023	79.09	Web	files wu 1
safe_proxy #ssrf #lfi (local-file-inclusion)#deno-file-scheme	CrewCTF 2023	20.33	Web	files wu 1
Baby_explorer #php #path-traversal #patch-diffing	CyberSecurityRumble 2023 Quals	24.80	Web	files wu 2
InternSkripting #web #http-header-manipulation #nginx-misconfiguration #unicode-int-bypass	CyberSecurityRumble 2023 Quals	24.80	Web	files wu 1
SecureHashedDb #sql-injection #php-object-injection #eval	DanteCTF 2023	24.44	Web	files wu 1
Ez #host-header-path-injection	KalmarCTF 2023	24.21	Web	files wu 1
Modern_Sicilian_Network #xss #cross-subdomain	TeamItaly 2023	24.88	Web	files wu 2
heaphp #use-after-free (uaf)#info-leak #php	WACON 2023 Quals	25.00	Pwn	files wu 1
jabasass #wildfly-undertow-temp-file-upload #war-deploy-rce #java	0CTF 2022	100.00	Web	files wu 1
404NotFound #jolokia-exploitation	BSidesTLV 2022	23.94	Web	files wu 2
RobertIsAGangsta #python-type-confusion #json-scientific-notation #auth-bypass	CyberSecurityRumble 2022	62.00	Web	files wu 2
2rm1 #java-rmi #insecure-deserialization #ssrf #jndi	0CTF 2021 Quals	–	Web	files wu 1
online_compiler #php-disable-functions-bypass #ffi	3kCTF 2021	24.14	Web	files wu 2
Huge_Primes #integer-factorization #yafu	Block 2021	30.75	Web	files wu 2
jupyter #stored-xss #jupyter-notebook	BuckeyeCTF 2021	24.81	Web	files wu 1
SeoFtw #cypher-injection	FwordCTF 2021	24.42	Web	files wu 1
json_analyser #json-interoperability	InCTF 2021	70.41	Web	files wu 1
Door_unLocked #cve-2021-40346	Intent 2021	19.97	Web	files wu 3
ProgrammersHateProgramming_2 #php-filter-bypass #nested-keyword-bypass #php-code-injection	PBjar 2021	23.18	Web	files wu 1
omgsosmolhowhacc_2_electric_boogaloo #command-injection #argument-injection #newline-injection #curl	PBjar 2021	23.18	Web	files wu 1
ruthless_monster #exiftool #cve-2021-22204 #djvu #polyglot-file	Pwn2Win 2021	83.41	Web	files wu 1
Electroplating #seccomp-bypass #shared-library-injection #file-upload	RaRCTF 2021	24.53	Web	files wu 1
SecureStorage #xss #postmessage #iframe-injection	RaRCTF 2021	24.53	Web	files wu 1
GOFTP #ssrf #ftp-passive-mode #dns-rebinding	SCTF 2021	–	Web	files wu 1
Upload_it #php-session-deserialization #pop-chain	SCTF 2021	–	Web	files wu 1

Challenges