CTF challenges & writeups

355 challenges in family ⊕ web ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
super-secure-translation-implementation #ssti #jinja2 #filter-bypass	DamCTF 2021	24.43	Web	files wu 3
BabierCSP #web #csp-bypass #xss #cookie-theft	DiceCTF 2021	24.82	Web	files wu 3
MissingFlavortext #web #sqlite-injection #type-juggling #filter-bypass	DiceCTF 2021	24.82	Web	files wu 3
WebIDE #web #js-sandbox-escape #service-workers #cookie-path-bypass	DiceCTF 2021	24.82	Web	files wu 3
WebUtils #web #xss #nodejs #cookie-theft	DiceCTF 2021	24.82	Web	files wu 3
build-a-panel #web #sql-injection #nodejs #admin-bot	DiceCTF 2021	24.82	Web	files wu 3
Notepad #dompurify-bypass	DownUnderCTF 2021	–	Web	files wu 2
grading #idor	HSCTF 2021	–	Web	files wu 3
message-board #cookie-tampering	HSCTF 2021	–	Web	files wu 3
SeekingExploits #second-order-sqli	Hack.lu 2021	94.48	Web	files wu 1
diamond-safe #sql-injection	Hack.lu 2021	94.48	Web	files wu 2
Awkward_Bypass #blind-sql-injection	ImaginaryCTF 2021	–	Web	files wu 1
Build-A-Website #ssti	ImaginaryCTF 2021	–	Web	files wu 3
SaaS #sed-command-injection	ImaginaryCTF 2021	–	Web	files wu 3
Sinking_Calculator #ssti	ImaginaryCTF 2021	–	Web	files wu 1
diveinternal #ssrf-host-header	LINE 2021	–	Web	files wu 2
Custom_Blog #php-session-lfi-rce	MetaCTF 2021	–	Web	files wu 3
Yummy_Vegetables #sql-injection	MetaCTF 2021	–	Web	files wu 2
AgentTester #union-sql-injection	NahamCon 2021	24.98	Web	files wu 3
CerealAndMilk #php-object-injection	NahamCon 2021	24.98	Web	files wu 3
Plaid_Party_Planning_IV #ocaml-type-confusion #float-unboxing	PlaidCTF 2021	99.64	Web	files wu 1
Wowza #race-condition #prototype-pollution #ssrf	PlaidCTF 2021	99.64	Web	files wu 2
CandyShop #nosql-injection #ssti	RCTF 2021	–	Web	files wu 1
Easyphp #url-decode-discrepancy #auth-bypass #double-encoding	RCTF 2021	–	Web	files wu 1
VerySafe #caddy-path-traversal #php-fpm #argument-injection	RCTF 2021	–	Web	files wu 1
ns_shaft_sql #error-based-sqli #mysql	RCTF 2021	–	Web	files wu 1
xss_it #ejs-ssti #xss #xs-leak	RCTF 2021	–	Web	files wu 1
junior-jwt #jwt #algorithm-confusion #rs256-to-hs256	S4CTF 2021	24.52	Web	files wu 1
Seventh_Core_of_Hell #core-dump-analysis #flask	TAMUctf 2021	–	Web	files wu 1
TicTacToe #logic-flaw	TAMUctf 2021	–	Pwn	files wu 2
delfi #lfi (local-file-inclusion)#proc-memory-read	TAMUctf 2021	–	Web	files wu 1
giita #prototype-pollution #xss	TSG 2021	–	Web	files wu 1
PharOut #phar-deserialization	Tenable 2021	22.37	Web	files wu 2
ponydb #sql-injection #sql-truncation	UIUCTF 2021	–	Web	files wu 1
pwnyIDE #ssrf #ftp	UIUCTF 2021	–	Web	files wu 1
yana #subdomain-takeover #xs-leak	UIUCTF 2021	–	Web	files wu 2
webserver #command-injection	UMassCTF 2021	23.56	Pwn	files wu 3
Static_Site #crlf-injection #nginx-misconfiguration	VolgaCTF 2021 Quals	32.73	Web	files wu 2
flask-admin #broken-access-control #path-normalization	VolgaCTF 2021 Quals	32.73	Web	files wu 2
Flags #html-injection #css-injection #csp-bypass #data-exfiltration	Zh3r0 2021	–	Web	files wu 1

Challenges