CTF challenges & writeups

37 challenges in family ⊕ web:path-traversal ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
Pixel_Perfect #arbitrary-file-upload #rce	TRX 2026	–	Web	files wu 1
just_download_it #path-traversal #lfi (local-file-inclusion)	VuwCTF 2026	25.00	Web	files wu 1
dummyhole #content-type-bypass #path-traversal #ssrf	SECCON 2025 Quals	–	Web	files wu 1
Editor #html-injection #local-file-read	SwampCTF 2025	40.40	Web	files wu 3
SafeNotes_2.0 #client-side-path-traversal #cspt	1337UP 2024	–	Web	files wu 1
Advanced_JSON_Cutifier #jsonnet-file-read	Mapna 2024	24.59	Web	files wu 1
Novel_reader #double-url-encode-path-traversal	Mapna 2024	24.59	Web	files wu 1
Funny_lfr #lfi (local-file-inclusion)#race-condition	SekaiCTF 2024	36.96	Web	files wu 1
imagehost #jwt-kid-path-traversal #rs256-key-confusion #auth-bypass	b01lers 2024	30.80	Web	files wu 1
funny_factorials #lfi (local-file-inclusion)#path-normalization-bypass #flask	AmateursCTF 2023	24.54	Web	files wu 3
GIFT #type-juggling #lfi (local-file-inclusion)#sql-injection	TetCTF 2023	53.89	Web	files wu 1
msfrognymize #lfi (local-file-inclusion)#path-traversal #os-path-join	corCTF 2023	36.97	Web	files wu 1
raas-v1 #curl-argument-injection #local-file-read #ssrf	ASIS 2022 Finals	87.00	Web	files wu 1
gallery #path-traversal	HSCTF 2022	–	Web	files wu 2
online-library #path-traversal-lfi	LINE 2022	–	Web	files wu 1
ZaaS #zip-slip #path-traversal	PatriotCTF 2022	24.52	Web	files wu 1
LocalCardMaker #lfi (local-file-inclusion)#php-rce	THCon 2022	–	Web	files wu 1
mmocc #path-traversal	TJCTF 2022	–	Web	files wu 2
photoable #path-traversal	TJCTF 2022	–	Web	files wu 1
gitfile_explorer #ssrf #path-traversal #file-scheme	zer0pts 2022	35.97	Web	files wu 1
VerySafe #caddy-path-traversal #php-fpm #argument-injection	RCTF 2021	–	Web	files wu 1
delfi #lfi (local-file-inclusion)#proc-memory-read	TAMUctf 2021	–	Web	files wu 1
includers_revenge #lfi (local-file-inclusion)	hxp 2021	99.41	Web	files wu 1
unzipper #lfi (local-file-inclusion)	hxp 2021	99.41	Web	files wu 3
Awklet #path-traversal #awk-cgi	BuckeyeCTF 2025	–	Web	files wu 1
G0tchaberg #html-to-pdf-lfi	KalmarCTF 2025	33.89	Web	files wu 2
ProfileEditor #path-traversal #flask	PwnMe 2025 Quals	24.95	Web	files wu 1
WX_Underground #arbitrary-file-write #command-length-limit	SAS 2025 Quals	20.72	Misc	files wu 1
SSFS #path-traversal	BuckeyeCTF 2024	50.91	Web	files wu 1
safe_proxy #ssrf #lfi (local-file-inclusion)#deno-file-scheme	CrewCTF 2023	20.33	Web	files wu 1
Baby_explorer #php #path-traversal #patch-diffing	CyberSecurityRumble 2023 Quals	24.80	Web	files wu 2
Borraccia #path-traversal #rce	TeamItaly 2023	24.88	Web	files wu 1
nft #path-traversal #os-path-join	Codegate 2022 Quals	–	Crypto	files wu 1
Etulosba #path-traversal	Intent 2021	19.97	Web	files wu 3
secureuploader #path-traversal #os-path-join	RaRCTF 2021	24.53	Web	files wu 2
BLT #cve-2021-41773 #path-traversal #apache	SPbCTF 2021 Quals	–	Misc	files wu 1
cg_casino #proc-self-environ #arbitrary-file-read	Codegate 2019 Quals	–	Misc	files wu 1

Challenges