#rce CTF challenges
8 CTF challenges using rce from 7 CTFs (2021–2026), 8 with writeups.
Often combined with
#web 2 #strtok-filename-truncation 1 #php-file-upload-bypass 1 #sandbox-escape 1 #jwt 1 #nodejs-vm-escape 1 #toprimitive 1 #prototype-pollution 1 #arbitrary-file-upload 1 #path-traversal 1 #command-injection 1 #ejs-ssti 1 #prompt-injection 1 #ssrf 1 #log-injection 1
Challenges
Filter and sort these in the challenge browser →
| Challenge | CTF | Weight | Category | Has |
|---|---|---|---|---|
| illusion | Pwn2Win 2021 | 83.41 | Web | files wu 3 |
| gpwaf | DiceCTF 2024 Quals | 54.40 | Web | files wu 1 |
| jwtjail | DiceCTF 2023 | 36.70 | Web | files wu 1 |
| Proxy | SAS 2025 Quals | 20.72 | Web | files wu 1 |
| php_sucks | BackdoorCTF 2023 | – | Web | files wu 1 |
| Borraccia | TeamItaly 2023 | 24.88 | Web | files wu 1 |
| Ping_Me | TraceBash 2026 | 25.00 | Web | files wu 1 |
| Pixel_Perfect | TRX 2026 | – | Web | files wu 1 |