CTF challenges & writeups

22 challenges tagged #web ✕ clear · browse all techniques

Challenge	CTF	Weight	Category	Has
cookie_recipes_v3 #web #type-confusion #parameter-pollution #express	DiceCTF 2025 Quals	81.00	Web	files wu 1
safestnote #web #css-injection #bfcache #form-state-restoration	DiceCTF 2025 Quals	81.00	Web	files wu 1
calculator #web #xss #eval #typescript #no-csp	DiceCTF 2024 Quals	54.40	Web	files wu 1
funnylogin #web #sql-injection #prototype-pollution #type-confusion	DiceCTF 2024 Quals	54.40	Web	files wu 3
gpwaf #web #prompt-injection #ejs-ssti #rce	DiceCTF 2024 Quals	54.40	Web	files wu 1
chessrs #wasm #rust #use-after-free (uaf)#xss #web	DiceCTF 2023	36.70	Pwn	files wu 2
codebox #web #xss #csp-bypass #trusted-types	DiceCTF 2023	36.70	Web	files wu 2
jnotes #web #cookie-injection #java-cookie-parsing #iframe-leak	DiceCTF 2023	36.70	Web	files wu 1
jwtjail #web #jwt #nodejs-vm-escape #sandbox-escape #toprimitive #rce	DiceCTF 2023	36.70	Web	files wu 1
blazingfast #web #xss #unicode-normalization	DiceCTF 2022	24.82	Web	files wu 2
flare #web #cve-2022-23632 #mtls-bypass	DiceCTF 2022	24.82	Web	files wu 1
knock-knock #web #hmac-forgery #predictable-secret #nodejs	DiceCTF 2022	24.82	Web	files wu 3
no-cookies #web #sql-injection #xss #regexp-input-leak	DiceCTF 2022	24.82	Web	files wu 1
vm-calc #web #prototype-pollution #nodejs-vm #proxy	DiceCTF 2022	24.82	Web	files wu 1
Gatekeeping #web #nginx-gunicorn-path-bypass #access-control-bypass	CSAW 2021 Quals	20.54	Web	files wu 3
BabierCSP #web #csp-bypass #xss #cookie-theft	DiceCTF 2021	24.82	Web	files wu 3
MissingFlavortext #web #sqlite-injection #type-juggling #filter-bypass	DiceCTF 2021	24.82	Web	files wu 3
WebIDE #web #js-sandbox-escape #service-workers #cookie-path-bypass	DiceCTF 2021	24.82	Web	files wu 3
WebUtils #web #xss #nodejs #cookie-theft	DiceCTF 2021	24.82	Web	files wu 3
build-a-panel #web #sql-injection #nodejs #admin-bot	DiceCTF 2021	24.82	Web	files wu 3
Conspiracy_Social #web #xss #websocket #admin-bot-token-theft #csp-bypass	CyberSecurityRumble 2024 Quals	100.00	Web	files wu 1
InternSkripting #web #http-header-manipulation #nginx-misconfiguration #unicode-int-bypass	CyberSecurityRumble 2023 Quals	24.80	Web	files wu 1

Challenges