CTF challenges & writeups

355 challenges in family ⊕ web ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
Banking_Issues #python-negative-index #access-control-bypass	BxMCTF 2023	–	Pwn	files wu 1
Username_Decorator #ssti #jinja2	BxMCTF 2023	–	Web	files wu 1
Cybercrime_Society_Club_Germany #argument-injection #auth-bypass	CCCamp 2023	25.00	Web	files wu 1
infinite #smart-contract #token-economy-logic-flaw	CrewCTF 2023	20.33	Blockchain	files wu 3
safe_proxy #ssrf #lfi (local-file-inclusion)#deno-file-scheme	CrewCTF 2023	20.33	Web	files wu 1
sequence_gallery #argument-injection #dc-rce	CrewCTF 2023	20.33	Web	files wu 1
Baby_explorer #php #path-traversal #patch-diffing	CyberSecurityRumble 2023 Quals	24.80	Web	files wu 2
InternSkripting #web #http-header-manipulation #nginx-misconfiguration #unicode-int-bypass	CyberSecurityRumble 2023 Quals	24.80	Web	files wu 1
SecureHashedDb #sql-injection #php-object-injection #eval	DanteCTF 2023	24.44	Web	files wu 1
Ez #host-header-path-injection	KalmarCTF 2023	24.21	Web	files wu 1
Borraccia #path-traversal #rce	TeamItaly 2023	24.88	Web	files wu 1
Modern_Sicilian_Network #xss #cross-subdomain	TeamItaly 2023	24.88	Web	files wu 2
Super_Admin_Panel #xss #csrf	TeamItaly 2023	24.88	Web	files wu 1
TrashBin #ssrf #insecure-deserialization #x-accel-redirect	TeamItaly 2023	24.88	Web	files wu 1
leakynote_v3 #xs-leak #open-redirect	TeamItaly 2023	24.88	Web	files wu 1
heaphp #use-after-free (uaf)#info-leak #php	WACON 2023 Quals	25.00	Pwn	files wu 1
jabasass #wildfly-undertow-temp-file-upload #war-deploy-rce #java	0CTF 2022	100.00	Web	files wu 1
404NotFound #jolokia-exploitation	BSidesTLV 2022	23.94	Web	files wu 2
mod_pwn #stack-overflow #apache-module	BSidesTLV 2022	23.94	Pwn	files wu 1
2linenodejs #prototype-pollution #nodejs #rce-gadget	Balsn 2022	53.42	Web	files wu 1
my_first_app #nextjs-source-api-disclosure	Balsn 2022	53.42	Web	files wu 1
CAFE #parser-differential #xss	Codegate 2022 Quals	–	Web	files wu 1
myblog #xpath-injection	Codegate 2022 Quals	–	Web	files wu 1
nft #path-traversal #os-path-join	Codegate 2022 Quals	–	Crypto	files wu 1
RobertIsAGangsta #python-type-confusion #json-scientific-notation #auth-bypass	CyberSecurityRumble 2022	62.00	Web	files wu 2
token #aes #pkcs7-padding #authentication-bypass	WRECKCTF 2022	–	Crypto	files wu 1
File.io #ssrf #token-leak	WeCTF 2022	36.12	Misc	files wu 1
GoogleWayback #xss #csrf	WeCTF 2022	36.12	Misc	files wu 1
RequestBin #ssti #go-templates	WeCTF 2022	36.12	Misc	files wu 1
vault #header-whitespace-normalization #admin-bot #auth-bypass	pingCTF 2022	24.29	Web	files wu 1
2rm1 #java-rmi #insecure-deserialization #ssrf #jndi	0CTF 2021 Quals	–	Web	files wu 1
online_compiler #php-disable-functions-bypass #ffi	3kCTF 2021	24.14	Web	files wu 2
telnet #arm #sql-injection #rop-ret2libc	3kCTF 2021	24.14	Pwn	files wu 1
InspectorGadget #ruby-deserialization #gadget-chain	BSidesTLV 2021	23.94	Pwn	files wu 1
Intellimage #hash-length-extension #exiftool-rce	BSidesTLV 2021	23.94	Web	files wu 1
Huge_Primes #integer-factorization #yafu	Block 2021	30.75	Web	files wu 2
jupyter #stored-xss #jupyter-notebook	BuckeyeCTF 2021	24.81	Web	files wu 1
Paired #windows-reversing #ipc-postmessage #inter-process-code-injection #xor	CyBRICS 2021	33.32	Reverse	files wu 1
payback #http-parameter-pollution #duplicate-parameter #logic-flaw	CyberSecurityRumble 2021	41.60	Crypto	files wu 2
ParrotOx #deserialization	FwordCTF 2021	24.42	Web	files wu 1

Challenges