$ ctf42

#broken-access-control CTF challenges

4 CTF challenges using broken-access-control from 4 CTFs (2021–2026), 4 with writeups.

Web · 4

Often combined with

#mass-assignment 1 #insecure-role-assignment 1 #missing-return 1 #go 1 #idor 1 #path-normalization 1

Challenges

Filter and sort these in the challenge browser →

Challenge CTF Weight Category Has
MSN_Revive
#idor#broken-access-control
 Srdnlen 2026 Quals 34.76 Web files wu 2
flask-admin
#broken-access-control#path-normalization
 VolgaCTF 2021 Quals 32.73 Web files wu 2
Escatlate_flag_1
#mass-assignment#insecure-role-assignment#broken-access-control
 1753CTF 2025 34.82 Web files wu 1
Drift_Chat
#broken-access-control#missing-return#go
 SAS 2025 Quals 20.72 Web files wu 1