$ ctf42

Challenges

Category
Difficulty
CTFtime weight
–
Higher weight ≈ harder, more prestigious event.
Year
–
Must have
Reset

76 challenges in family ⊕ web:xss ✕ clear · browse all techniques

Challenge CTF Weight Category Has
safestnote
#web#css-injection#bfcache#form-state-restoration
 DiceCTF 2025 Quals 81.00 Web files wu 1
mavs_fan
#xss-cookie-httponly-bypass
 LA 2025 – Web files wu 1
purell
#xss-sanitizer-bypass
 LA 2025 – Web files wu 1
Editor
#html-injection#local-file-read
 SwampCTF 2025 40.40 Web files wu 3
Are_you_incognito
#browser-extension#dom-clobbering
 TPCTF 2025 – Web files wu 1
baby_layout
#dompurify-bypass#xss
 TPCTF 2025 – Web files wu 1
safe_layout_revenge
#dompurify-bypass#mutation-xss
 TPCTF 2025 – Web files wu 1
Rush_Hour
#xss#cookie-theft#cors-bypass
 UMassCTF 2025 48.38 Web files wu 1
Rush_Hour_v2
#xss#cookie-theft
 UMassCTF 2025 48.38 Web files wu 1
calculator
#web#xss#eval#typescript#no-csp
 DiceCTF 2024 Quals 54.40 Web files wu 1
Bench_Press
#css-injection
 Hack.lu 2024 100.00 Web files wu 1
new_housing_portal
#dom-xss
 LA 2024 – Web files wu 2
one_time_read
#dom-xss
 LINE 2024 – Web files wu 1
Open_Seasame
#stored-xss#command-injection#admin-bot
 PatriotCTF 2024 31.83 Web files wu 1
Tagless
#xss#csp-bypass#mime-sniffing
 SekaiCTF 2024 36.96 Web files wu 1
htmlsandbox
#xss#csp-bypass#charset-confusion
 SekaiCTF 2024 36.96 Web files wu 1
pwnypass
#css-injection#browser-extension
 UIUCTF 2024 – Web files wu 1
b01ler_ad
#xss#puppeteer-admin-bot
 b01lers 2024 30.80 Web files wu 2
Image_gallery_1
#xss#bfcache
 bi0sCTF 2024 79.83 Web files wu 2
Image_gallery_2
#dom-clobbering#cache-probing
 bi0sCTF 2024 79.83 Web files wu 1
corctf_challenge_dev
#stored-xss#csp-bypass#extension-exploitation
 corCTF 2024 55.00 Web files wu 1
Another_Another_CSP
#css-injection-leak
 justCTF 2024 Quals 77.17 Web files wu 1
justPocketTheBase
#xss-filter-bypass
 justCTF 2024 Quals 77.17 Web files wu 2
flarenotes_revenge
#xss#dompurify-bypass#cloudflare-bypass
 vsCTF 2024 34.00 Web files wu 1
gimme_csp
#csp-bypass#content-type-confusion#xss
 ASIS 2023 Finals 89.80 Web files wu 1
sanity
#dom-clobbering#prototype-pollution#xss
 AmateursCTF 2023 24.54 Web files wu 2
chessrs
#wasm#rust#use-after-free (uaf)#xss#web
 DiceCTF 2023 36.70 Pwn files wu 2
codebox
#web#xss#csp-bypass#trusted-types
 DiceCTF 2023 36.70 Web files wu 2
fancy-page
#xss
 HSCTF 2023 – Web files wu 3
Awesomenotes_II
#mxss
 Hack.lu 2023 94.73 Web files wu 1
Based_Encoding
#xss
 Hack.lu 2023 94.73 Web files wu 3
hptla
#xss-event-handler
 LA 2023 – Web files wu 2
metaverse
#xss-csrf-chain
 LA 2023 – Web files wu 3
0_CSP
#crlf-injection#xss#cache-poisoning
 Securinets 2023 Quals 65.42 Web files wu 1
BABY_DUCKY_NOTES_REVENGE
#xss
 TFC 2023 – Web files wu 1
Brainfxxk_Challenge
#xss#csp-bypass
 TSG 2023 – Web files wu 2
absurdres
#xss#csp-bypass
 TSG 2023 – Web files wu 2
adversal
#css-injection#csp-bypass#data-exfiltration
 WolvCTF 2023 24.33 Web files wu 1
zombie-101
#xss#cookie-theft
 WolvCTF 2023 24.33 Web files wu 3
fishy-motd
#stored-xss
 b01lers 2023 36.84 Web files wu 1