CTF challenges & writeups

355 challenges in family ⊕ web ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
Data_Explorer #order-by-sql-injection	MapleCTF 2023	24.05	Web	files wu 1
JUJUTSU_KAISEN_2 #esi-injection	MapleCTF 2023	24.05	Web	files wu 1
Transfer #sql-injection	NahamCon 2023	34.82	Web	files wu 1
Flower_Shop #command-injection #curl #webhook	PatriotCTF 2023	24.52	Web	files wu 1
0_CSP #crlf-injection #xss #cache-poisoning	Securinets 2023 Quals	65.42	Web	files wu 1
Chunky #request-smuggling #jwt #jwks-spoofing #cache-poisoning	SekaiCTF 2023	24.86	Web	files wu 1
Frog_WAF #ssti #waf-bypass #java-el-injection	SekaiCTF 2023	24.86	Web	files wu 1
Scanner_Service #command-injection #nmap	SekaiCTF 2023	24.86	Web	files wu 1
BABY_DUCKY_NOTES_REVENGE #xss	TFC 2023	–	Web	files wu 1
yolo #csp-bypass #predictable-nonce	TJCTF 2023	–	Web	files wu 1
Brainfxxk_Challenge #xss #csp-bypass	TSG 2023	–	Web	files wu 2
Ghost #logic-flaw	TSG 2023	–	Pwn	files wu 2
absurdres #xss #csp-bypass	TSG 2023	–	Web	files wu 2
GIFT #type-juggling #lfi (local-file-inclusion)#sql-injection	TetCTF 2023	53.89	Web	files wu 1
ImageServicesViewer #ssrf #prototype-pollution #url-parsing-bypass	TetCTF 2023	53.89	Web	files wu 2
casino #business-logic-flaw #negative-value	TetCTF 2023	53.89	Crypto	files wu 1
adversal #css-injection #csp-bypass #data-exfiltration	WolvCTF 2023	24.33	Web	files wu 1
zombie-101 #xss #cookie-theft	WolvCTF 2023	24.33	Web	files wu 3
fishy-motd #stored-xss	b01lers 2023	36.84	Web	files wu 1
crabspace #ssti #webrtc #csp-bypass	corCTF 2023	36.97	Web	files wu 1
force #graphql-batching-attack #rate-limit-bypass	corCTF 2023	36.97	Web	files wu 3
frogshare #stored-xss #svg-xss	corCTF 2023	36.97	Web	files wu 1
msfrognymize #lfi (local-file-inclusion)#path-traversal #os-path-join	corCTF 2023	36.97	Web	files wu 1
Dangerous #x-forwarded-for	justCTF 2023	53.00	Web	files wu 2
eXtra_Safe_Security_layers #csp-bypass	justCTF 2023	53.00	Web	files wu 1
notabug #sqlite-load-extension	justCTF 2023	53.00	Pwn	files wu 1
1_truth_2_lies #ssti #jinja2 #python	1337UP 2022	22.49	Web	files wu 1
DeadTube #ssrf #dns-rebinding #blacklist-bypass	1337UP 2022	22.49	Web	files wu 1
raas-v1 #curl-argument-injection #local-file-read #ssrf	ASIS 2022 Finals	87.00	Web	files wu 1
cakegear #php-type-juggling #auth-bypass	CakeCTF 2022	–	Web	files wu 1
openbio #angularjs-csti #csp-bypass	CakeCTF 2022	–	Web	files wu 1
panda_memo #prototype-pollution #cve-2022-21824	CakeCTF 2022	–	Web	files wu 1
blazingfast #web #xss #unicode-normalization	DiceCTF 2022	24.82	Web	files wu 2
flare #web #cve-2022-23632 #mtls-bypass	DiceCTF 2022	24.82	Web	files wu 1
knock-knock #web #hmac-forgery #predictable-secret #nodejs	DiceCTF 2022	24.82	Web	files wu 3
no-cookies #web #sql-injection #xss #regexp-input-leak	DiceCTF 2022	24.82	Web	files wu 1
vm-calc #web #prototype-pollution #nodejs-vm #proxy	DiceCTF 2022	24.82	Web	files wu 1
gallery #path-traversal	HSCTF 2022	–	Web	files wu 2
markdown-plus-plus #css-injection	HSCTF 2022	–	Web	files wu 1
png-wizard #command-injection	HSCTF 2022	–	Web	files wu 1

Challenges