#path-traversal CTF challenges
17 CTF challenges using path-traversal from 15 CTFs (2021–2026), 17 with writeups. Mostly Web (88%).
Often combined with
#os-path-join 3 #lfi 2 #ssrf 2 #awk-cgi 1 #zip-slip 1 #rce 1 #file-scheme 1 #patch-diffing 1 #php 1 #flask 1 #content-type-bypass 1 #apache 1 #cve-2021-41773 1
Challenges
Filter and sort these in the challenge browser →
| Challenge | CTF | Weight | Category | Has |
|---|---|---|---|---|
| Etulosba | Intent 2021 | 19.97 | Web | files wu 3 |
| Baby_explorer | CyberSecurityRumble 2023 Quals | 24.80 | Web | files wu 2 |
| secureuploader | RaRCTF 2021 | 24.53 | Web | files wu 2 |
| gallery | HSCTF 2022 | – | Web | files wu 2 |
| mmocc | TJCTF 2022 | – | Web | files wu 2 |
| ZaaS | PatriotCTF 2022 | 24.52 | Web | files wu 1 |
| gitfile_explorer | zer0pts 2022 | 35.97 | Web | files wu 1 |
| Borraccia | TeamItaly 2023 | 24.88 | Web | files wu 1 |
| nft | Codegate 2022 Quals | – | Crypto | files wu 1 |
| just_download_it | VuwCTF 2026 | 25.00 | Web | files wu 1 |
| ProfileEditor | PwnMe 2025 Quals | 24.95 | Web | files wu 1 |
| Awklet | BuckeyeCTF 2025 | – | Web | files wu 1 |
| SSFS | BuckeyeCTF 2024 | 50.91 | Web | files wu 1 |
| photoable | TJCTF 2022 | – | Web | files wu 1 |
| msfrognymize | corCTF 2023 | 36.97 | Web | files wu 1 |
| BLT | SPbCTF 2021 Quals | – | Misc | files wu 1 |
| dummyhole | SECCON 2025 Quals | – | Web | files wu 1 |