CTF challenges & writeups

355 challenges in family ⊕ web ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
b01ler_ad #xss #puppeteer-admin-bot	b01lers 2024	30.80	Web	files wu 2
imagehost #jwt-kid-path-traversal #rs256-key-confusion #auth-bypass	b01lers 2024	30.80	Web	files wu 1
Image_gallery_1 #xss #bfcache	bi0sCTF 2024	79.83	Web	files wu 2
Image_gallery_2 #dom-clobbering #cache-probing	bi0sCTF 2024	79.83	Web	files wu 1
Variety_Notes #redos #csp-bypass	bi0sCTF 2024	79.83	Web	files wu 1
corchat_v3 #sql-injection #use-after-free (uaf)#tcache-perthread-struct	corCTF 2024	55.00	Pwn	files wu 1
corctf_challenge_dev #stored-xss #csp-bypass #extension-exploitation	corCTF 2024	55.00	Web	files wu 1
msfrogofwar3 #ssti	corCTF 2024	55.00	Misc	files wu 1
phpnotes #http-request-smuggling	hxp 2024	–	Web	files wu 1
Another_Another_CSP #css-injection-leak	justCTF 2024 Quals	77.17	Web	files wu 1
Dark_BrOTTERhood #move-access-control	justCTF 2024 Quals	77.17	Blockchain	files wu 3
justPocketTheBase #xss-filter-bypass	justCTF 2024 Quals	77.17	Web	files wu 2
File_Sharing_Portal #ssti-via-filename	n00bzCTF 2024	24.23	Web	files wu 2
flarenotes_revenge #xss #dompurify-bypass #cloudflare-bypass	vsCTF 2024	34.00	Web	files wu 1
gimme_csp #csp-bypass #content-type-confusion #xss	ASIS 2023 Finals	89.80	Web	files wu 1
funny_factorials #lfi (local-file-inclusion)#path-normalization-bypass #flask	AmateursCTF 2023	24.54	Web	files wu 3
go-gopher #ssrf #gopher-protocol	AmateursCTF 2023	24.54	Web	files wu 3
sanity #dom-clobbering #prototype-pollution #xss	AmateursCTF 2023	24.54	Web	files wu 2
urmombotnetdotnetcom_1 #error-based-info-disclosure #duplicate-registration	BYUCTF 2023	–	Web	files wu 1
php_sucks #php-file-upload-bypass #strtok-filename-truncation #rce	BackdoorCTF 2023	–	Web	files wu 1
chessrs #wasm #rust #use-after-free (uaf)#xss #web	DiceCTF 2023	36.70	Pwn	files wu 2
codebox #web #xss #csp-bypass #trusted-types	DiceCTF 2023	36.70	Web	files wu 2
jnotes #web #cookie-injection #java-cookie-parsing #iframe-leak	DiceCTF 2023	36.70	Web	files wu 1
jwtjail #web #jwt #nodejs-vm-escape #sandbox-escape #toprimitive #rce	DiceCTF 2023	36.70	Web	files wu 1
proxed #x-forwarded-for	DownUnderCTF 2023	46.63	Web	files wu 1
fancy-page #xss	HSCTF 2023	–	Web	files wu 3
mogodb #nosql-injection	HSCTF 2023	–	Web	files wu 3
very-secure #flask-session-forgery	HSCTF 2023	–	Web	files wu 2
west-side-story #json-injection	HSCTF 2023	–	Web	files wu 1
Awesomenotes_I #htmx-injection	Hack.lu 2023	94.73	Web	files wu 2
Awesomenotes_II #mxss	Hack.lu 2023	94.73	Web	files wu 1
Based_Encoding #xss	Hack.lu 2023	94.73	Web	files wu 3
Referrrrer #referer-bypass	HeroCTF 2023	–	Web	files wu 1
blank #sql-injection	ImaginaryCTF 2023	34.52	Web	files wu 3
california-state-police #csp-bypass-navigation	LA 2023	–	Web	files wu 2
hptla #xss-event-handler	LA 2023	–	Web	files wu 2
metaverse #xss-csrf-chain	LA 2023	–	Web	files wu 3
uuid-hell #uuid-prediction	LA 2023	–	Web	files wu 2
another-secure-store-note #dangling-markup	LINE 2023	–	Web	files wu 1
baby-simple-gocurl #x-forwarded-for-spoof	LINE 2023	–	Web	files wu 1

Challenges