CTF challenges & writeups

41 challenges in family ⊕ web:sql-injection ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
FU_Career #sql-injection-into-outfile	LYKNCTF 2026	–	Web	files wu 1
Ben_10 #sql-injection	Srdnlen 2025	–	Web	files wu 1
Limited_1 #sql-injection #union-based #filter-bypass	WolvCTF 2025	47.25	Web	files wu 1
NoSQL #nosql-injection	BCACTF 2024	–	Web	files wu 1
funnylogin #web #sql-injection #prototype-pollution #type-confusion	DiceCTF 2024 Quals	54.40	Web	files wu 3
la_housing_portal #sql-injection	LA 2024	–	Web	files wu 3
Hacker_Web_Store #sql-injection	NahamCon 2024	41.61	Web	files wu 1
SQLite_of_Hand #sql-injection	TSG 2024	–	Pwn	files wu 1
corchat_v3 #sql-injection #use-after-free (uaf)#tcache-perthread-struct	corCTF 2024	55.00	Pwn	files wu 1
mogodb #nosql-injection	HSCTF 2023	–	Web	files wu 3
blank #sql-injection	ImaginaryCTF 2023	34.52	Web	files wu 3
Data_Explorer #order-by-sql-injection	MapleCTF 2023	24.05	Web	files wu 1
Transfer #sql-injection	NahamCon 2023	34.82	Web	files wu 1
GIFT #type-juggling #lfi (local-file-inclusion)#sql-injection	TetCTF 2023	53.89	Web	files wu 1
notabug #sqlite-load-extension	justCTF 2023	53.00	Pwn	files wu 1
no-cookies #web #sql-injection #xss #regexp-input-leak	DiceCTF 2022	24.82	Web	files wu 1
analects #sql-injection #charset-bypass	TJCTF 2022	–	Web	files wu 1
ascordle #sql-injection	TJCTF 2022	–	Web	files wu 1
game-leaderboard #sql-injection	TJCTF 2022	–	Web	files wu 3
sqlite_web #sqlite-rce	hxp 2022	–	Web	files wu 2
amazing-crypto-waf #sql-injection #waf-bypass	ALLES 2021	–	Web	files wu 1
Movie-Login-2 #sql-injection	BCACTF 2021	–	Web	files wu 3
Movie-Login-3 #sql-injection	BCACTF 2021	–	Web	files wu 3
MissingFlavortext #web #sqlite-injection #type-juggling #filter-bypass	DiceCTF 2021	24.82	Web	files wu 3
build-a-panel #web #sql-injection #nodejs #admin-bot	DiceCTF 2021	24.82	Web	files wu 3
SeekingExploits #second-order-sqli	Hack.lu 2021	94.48	Web	files wu 1
diamond-safe #sql-injection	Hack.lu 2021	94.48	Web	files wu 2
Awkward_Bypass #blind-sql-injection	ImaginaryCTF 2021	–	Web	files wu 1
Yummy_Vegetables #sql-injection	MetaCTF 2021	–	Web	files wu 2
AgentTester #union-sql-injection	NahamCon 2021	24.98	Web	files wu 3
CandyShop #nosql-injection #ssti	RCTF 2021	–	Web	files wu 1
ns_shaft_sql #error-based-sqli #mysql	RCTF 2021	–	Web	files wu 1
ponydb #sql-injection #sql-truncation	UIUCTF 2021	–	Web	files wu 1
shitty_blog #sql-injection	hxp 2021	99.41	Web	files wu 3
baby_sqli #sql-injection #sqlite #escape-bypass #authentication-bypass	zer0pts 2021	24.56	Web	files wu 2
Packages #sql-injection	BuckeyeCTF 2025	–	Web	files wu 1
SecureHashedDb #sql-injection #php-object-injection #eval	DanteCTF 2023	24.44	Web	files wu 1
telnet #arm #sql-injection #rop-ret2libc	3kCTF 2021	24.14	Pwn	files wu 1
built_in_http #sqlite-fts3-tokenizer	IJCTF 2020	–	Misc	files wu 2
SignIn #error-based-sqli	N1CTF 2020	36.00	Misc	files wu 3

Challenges