#command-injection CTF challenges

17 CTF challenges using command-injection from 15 CTFs (2019–2026), 17 with writeups. Mostly Web (71%) and Misc (18%).

Web · 12 Misc · 3 Pwn · 2

Often combined with

#curl 2 #argument-injection 2 #filter-bypass 2 #newline-injection 1 #webhook 1 #admin-bot 1 #stored-xss 1 #jwt 1 #weak-diffie-hellman 1 #meet-in-the-middle 1 #nmap 1 #rce 1 #glob-expansion 1 #waf-bypass 1 #sandbox-escape 1

Challenges

Filter and sort these in the challenge browser →