CTF challenges & writeups

355 challenges in family ⊕ web ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
SeoFtw #cypher-injection	FwordCTF 2021	24.42	Web	files wu 1
Shisui #dom-clobbering	FwordCTF 2021	24.42	Web	files wu 1
Memory #php-session-upload-progress	IJCTF 2021	–	Web	files wu 1
Raas #ssrf	InCTF 2021	70.41	Web	files wu 2
json_analyser #json-interoperability	InCTF 2021	70.41	Web	files wu 1
md-notes #postmessage-xss	InCTF 2021	70.41	Web	files wu 1
Door_unLocked #cve-2021-40346	Intent 2021	19.97	Web	files wu 3
Etulosba #path-traversal	Intent 2021	19.97	Web	files wu 3
Repeated_Lock #jinja2-ssti	MetaRed 2021	–	Web	files wu 1
ProgrammersHateProgramming_2 #php-filter-bypass #nested-keyword-bypass #php-code-injection	PBjar 2021	23.18	Web	files wu 1
omgsosmolhowhacc_2_electric_boogaloo #command-injection #argument-injection #newline-injection #curl	PBjar 2021	23.18	Web	files wu 1
c_mon_see_my_vulns #php-eval-injection #disable-functions-bypass #chankro #ld-preload	Pwn2Win 2021	83.41	Pwn	files wu 2
illusion #prototype-pollution #rce	Pwn2Win 2021	83.41	Web	files wu 3
ruthless_monster #exiftool #cve-2021-22204 #djvu #polyglot-file	Pwn2Win 2021	83.41	Web	files wu 1
Electroplating #seccomp-bypass #shared-library-injection #file-upload	RaRCTF 2021	24.53	Web	files wu 1
SecureStorage #xss #postmessage #iframe-injection	RaRCTF 2021	24.53	Web	files wu 1
lemonthinker #command-injection	RaRCTF 2021	24.53	Web	files wu 3
secureuploader #path-traversal #os-path-join	RaRCTF 2021	24.53	Web	files wu 2
GOFTP #ssrf #ftp-passive-mode #dns-rebinding	SCTF 2021	–	Web	files wu 1
Loginme #ssti #http-header-injection	SCTF 2021	–	Web	files wu 2
Upload_it #php-session-deserialization #pop-chain	SCTF 2021	–	Web	files wu 1
Upload_it_2 #php-session-deserialization #pop-chain	SCTF 2021	–	Web	files wu 1
BLT #cve-2021-41773 #path-traversal #apache	SPbCTF 2021 Quals	–	Misc	files wu 1
Cr0wnAir #jwt #algorithm-confusion	Union 2021	24.34	Web	files wu 3
Cache #flask-session-forgery #debug-mode #secret-key	WeCTF 2021	25.00	Misc	files wu 1
Coin_Exchange #csrf #cors-misconfiguration	WeCTF 2021	25.00	Misc	files wu 1
Scratchpad #xs-search	Dragon 2020	98.00	Web	files wu 2
harmony_chat #deserialization	Dragon 2020	98.00	Web	files wu 2
built_in_http #sqlite-fts3-tokenizer	IJCTF 2020	–	Misc	files wu 2
SignIn #error-based-sqli	N1CTF 2020	36.00	Misc	files wu 3
Zooo #command-injection #argument-injection	RaziCTF 2020	21.91	Misc	files wu 3
pinger #command-injection	RaziCTF 2020	21.91	Misc	files wu 3
Happy_New_Year_Part1 #sqlite-injection	kksctf 2020	–	Misc	files wu 1
20000 #command-injection #filter-bypass	Codegate 2019 Quals	–	Misc	files wu 3
cg_casino #proc-self-environ #arbitrary-file-read	Codegate 2019 Quals	–	Misc	files wu 1

Challenges