CTF challenges & writeups

355 challenges in family ⊕ web ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
htpl #ast-injection	Hack.lu 2022	93.70	Web	files wu 1
heres-my-password #password-spraying	JerseyCTF 2022	25.00	Web	files wu 2
bb #dom-clobbering	LINE 2022	–	Web	files wu 1
gotm #go-template-ssti	LINE 2022	–	Web	files wu 3
online-library #path-traversal-lfi	LINE 2022	–	Web	files wu 1
Personnel #regex-injection	NahamCon 2022	24.61	Web	files wu 3
ExcellentDatabase #excel-formula-injection #csv-injection #libreoffice	PatriotCTF 2022	24.52	Web	files wu 2
TaaS #tar-symlink #race-condition	PatriotCTF 2022	24.52	Web	files wu 1
ZaaS #zip-slip #path-traversal	PatriotCTF 2022	24.52	Web	files wu 1
username_generator #javascript-scope-pollution #xss	SEETF 2022	–	Web	files wu 1
wayyang #python-eval-injection #filter-bypass	SEETF 2022	–	Pwn	files wu 3
NarutoKeeper #xss #meta-redirect	Securinets 2022 Quals	50.11	Web	files wu 1
LocalCardMaker #lfi (local-file-inclusion)#php-rce	THCon 2022	–	Web	files wu 1
analects #sql-injection #charset-bypass	TJCTF 2022	–	Web	files wu 1
ascordle #sql-injection	TJCTF 2022	–	Web	files wu 1
fleecebook #xss	TJCTF 2022	–	Web	files wu 1
fruit-store #business-logic-flaw	TJCTF 2022	–	Web	files wu 1
game-leaderboard #sql-injection	TJCTF 2022	–	Web	files wu 3
jokster #xss	TJCTF 2022	–	Web	files wu 1
mmocc #path-traversal	TJCTF 2022	–	Web	files wu 2
photoable #path-traversal	TJCTF 2022	–	Web	files wu 1
viewy #ssti #ejs	TJCTF 2022	–	Web	files wu 1
Juggler #type-juggling #php	UACTF 2022	–	Web	files wu 1
umassdining #dom-based-xss #csp-bypass #double-encoding	UMassCTF 2022	23.56	Web	files wu 2
Sigma #wasm-exploitation #buffer-overflow #xss	UTCTF 2022	–	Web	files wu 1
modernblog #dom-clobbering #css-leak	corCTF 2022	24.92	Web	files wu 2
rustshop #type-confusion #unsafe-deserialization	corCTF 2022	24.92	Web	files wu 1
simplewaf #parameter-object-injection #file-url-bypass	corCTF 2022	24.92	Web	files wu 1
archived #stored-xss	hxp 2022	–	Web	files wu 2
sqlite_web #sqlite-rce	hxp 2022	–	Web	files wu 2
valentine #ssti	hxp 2022	–	Web	files wu 3
dumbforum #jinja2-ssti	m0leCon 2022 Quals	36.00	Web	files wu 1
gitfile_explorer #ssrf #path-traversal #file-scheme	zer0pts 2022	35.97	Web	files wu 1
miniblog++ #ssti #jinja2 #filter-bypass	zer0pts 2022	35.97	Web	files wu 1
amazing-crypto-waf #sql-injection #waf-bypass	ALLES 2021	–	Web	files wu 1
lovely_nonces #xss #csp-nonce-bypass	ASIS 2021 Quals	89.22	Web	files wu 2
Movie-Login-2 #sql-injection	BCACTF 2021	–	Web	files wu 3
Movie-Login-3 #sql-injection	BCACTF 2021	–	Web	files wu 3
Stylish #css-injection	BCACTF 2021	–	Web	files wu 1
Gatekeeping #web #nginx-gunicorn-path-bypass #access-control-bypass	CSAW 2021 Quals	20.54	Web	files wu 3

Challenges