$ ctf42

Challenges

Category
Difficulty
CTFtime weight
–
Higher weight ≈ harder, more prestigious event.
Year
–
Must have
Reset

2434 challenges · browse all techniques

Challenge CTF Weight Category Has
Proxyproxy
#lighttpd-proxy-bypass
 Bhackari 2026 – Web files wu 1
FU_Career
#sql-injection-into-outfile
 LYKNCTF 2026 – Web files wu 1
MSN_Revive
#idor#broken-access-control
 Srdnlen 2026 Quals 34.76 Web files wu 2
Junkiness
#mass-assignment#privilege-escalation
 TRX 2026 – Web files wu 1
Pixel_Perfect
#arbitrary-file-upload#rce
 TRX 2026 – Web files wu 1
Pixel_Vault
#python-format-string-injection
 TRX 2026 – Web files wu 1
Duck_Nettool_Revenge
#filter-bypass#glob-expansion#command-injection
 V1T 2026 22.14 Web files wu 1
ant_universe
#bcrypt-truncation#authentication-bypass
 VuwCTF 2026 25.00 Web files wu 1
just_download_it
#path-traversal#lfi (local-file-inclusion)
 VuwCTF 2026 25.00 Web files wu 1
Entropyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
#bcrypt-72-byte-input-truncation
 1753CTF 2025 34.82 Web files wu 1
Escatlate_flag_1
#mass-assignment#insecure-role-assignment#broken-access-control
 1753CTF 2025 34.82 Web files wu 1
Escatlate_flag_2
#unicode-case-mapping-bypass#touppercase-tolowercase-normalization
 1753CTF 2025 34.82 Web files wu 1
cookie_recipes_v3
#web#type-confusion#parameter-pollution#express
 DiceCTF 2025 Quals 81.00 Web files wu 1
safestnote
#web#css-injection#bfcache#form-state-restoration
 DiceCTF 2025 Quals 81.00 Web files wu 1
Request_Handling
#ast-injection
 DownUnderCTF 2025 91.66 Web files wu 1
webwebhookhook
#dns-rebinding
 IrisCTF 2025 34.30 Web files wu 1
Layers_of_Lies
#php-wrappers
 JerseyCTF 2025 24.73 Web files wu 1
whats_your_number
#tcp-sequence-prediction
 JerseyCTF 2025 24.73 Web files wu 1
Exceeding_Knight
#laravel-debug-mode-leak
 KnightCTF 2025 18.78 Web files wu 1
Knight_Connect
#login-link-forgery
 KnightCTF 2025 18.78 Web files wu 1
Certay
#php-signature-forgery
 L3akCTF 2025 24.43 Web files wu 1
Flag_L3ak
#search-filter-oracle
 L3akCTF 2025 24.43 Web files wu 1
GitBad
#git-submodule-hook-rce
 L3akCTF 2025 24.43 Web files wu 1
certay_revenge
#php-eval-filter-bypass
 L3akCTF 2025 24.43 Web files wu 1
arclbroth
#null-byte-injection
 LA 2025 – Web files wu 1
mavs_fan
#xss-cookie-httponly-bypass
 LA 2025 – Web files wu 1
purell
#xss-sanitizer-bypass
 LA 2025 – Web files wu 1
airspeed
#airspeed-ssti#velocity-template#nginx-path-normalization-bypass
 QnQSec 2025 24.76 Web files wu 1
dummyhole
#content-type-bypass#path-traversal#ssrf
 SECCON 2025 Quals – Web files wu 1
Puzzle
#idor#privilege-escalation#info-disclosure
 Securinets CTF 2025 Quals – Web files wu 1
Captivating_Canvas_Contraption
#prototype-pollution#wasm#sandbox-escape
 SekaiCTF 2025 55.00 Web files wu 1
Average_HTTP_3_Enjoyer
#http3#quic
 Srdnlen 2025 – Web files wu 1
Ben_10
#sql-injection
 Srdnlen 2025 – Web files wu 1
Contamination
#proxy-bypass#parser-differential
 SwampCTF 2025 40.40 Web files wu 1
Editor
#html-injection#local-file-read
 SwampCTF 2025 40.40 Web files wu 3
Serialies
#insecure-deserialization#java
 SwampCTF 2025 40.40 Web files wu 1
Are_you_incognito
#browser-extension#dom-clobbering
 TPCTF 2025 – Web files wu 1
baby_layout
#dompurify-bypass#xss
 TPCTF 2025 – Web files wu 1
safe_layout_revenge
#dompurify-bypass#mutation-xss
 TPCTF 2025 – Web files wu 1
Online_Python_Editor
#python-sandbox-escape
 TRX 2025 – Web files wu 2