$ ctf42

Challenges

Category
Difficulty
CTFtime weight
–
Higher weight ≈ harder, more prestigious event.
Year
–
Must have
Reset

40 challenges tagged #xss ✕ clear · browse all techniques

Challenge CTF Weight Category Has
baby_layout
#dompurify-bypass#xss
 TPCTF 2025 – Web files wu 1
Rush_Hour
#xss#cookie-theft#cors-bypass
 UMassCTF 2025 48.38 Web files wu 1
Rush_Hour_v2
#xss#cookie-theft
 UMassCTF 2025 48.38 Web files wu 1
calculator
#web#xss#eval#typescript#no-csp
 DiceCTF 2024 Quals 54.40 Web files wu 1
Tagless
#xss#csp-bypass#mime-sniffing
 SekaiCTF 2024 36.96 Web files wu 1
htmlsandbox
#xss#csp-bypass#charset-confusion
 SekaiCTF 2024 36.96 Web files wu 1
b01ler_ad
#xss#puppeteer-admin-bot
 b01lers 2024 30.80 Web files wu 2
Image_gallery_1
#xss#bfcache
 bi0sCTF 2024 79.83 Web files wu 2
flarenotes_revenge
#xss#dompurify-bypass#cloudflare-bypass
 vsCTF 2024 34.00 Web files wu 1
gimme_csp
#csp-bypass#content-type-confusion#xss
 ASIS 2023 Finals 89.80 Web files wu 1
sanity
#dom-clobbering#prototype-pollution#xss
 AmateursCTF 2023 24.54 Web files wu 2
chessrs
#wasm#rust#use-after-free (uaf)#xss#web
 DiceCTF 2023 36.70 Pwn files wu 2
codebox
#web#xss#csp-bypass#trusted-types
 DiceCTF 2023 36.70 Web files wu 2
fancy-page
#xss
 HSCTF 2023 – Web files wu 3
Based_Encoding
#xss
 Hack.lu 2023 94.73 Web files wu 3
0_CSP
#crlf-injection#xss#cache-poisoning
 Securinets 2023 Quals 65.42 Web files wu 1
BABY_DUCKY_NOTES_REVENGE
#xss
 TFC 2023 – Web files wu 1
Brainfxxk_Challenge
#xss#csp-bypass
 TSG 2023 – Web files wu 2
absurdres
#xss#csp-bypass
 TSG 2023 – Web files wu 2
zombie-101
#xss#cookie-theft
 WolvCTF 2023 24.33 Web files wu 3
blazingfast
#web#xss#unicode-normalization
 DiceCTF 2022 24.82 Web files wu 2
no-cookies
#web#sql-injection#xss#regexp-input-leak
 DiceCTF 2022 24.82 Web files wu 1
username_generator
#javascript-scope-pollution#xss
 SEETF 2022 – Web files wu 1
NarutoKeeper
#xss#meta-redirect
 Securinets 2022 Quals 50.11 Web files wu 1
fleecebook
#xss
 TJCTF 2022 – Web files wu 1
jokster
#xss
 TJCTF 2022 – Web files wu 1
Sigma
#wasm-exploitation#buffer-overflow#xss
 UTCTF 2022 – Web files wu 1
lovely_nonces
#xss#csp-nonce-bypass
 ASIS 2021 Quals 89.22 Web files wu 2
BabierCSP
#web#csp-bypass#xss#cookie-theft
 DiceCTF 2021 24.82 Web files wu 3
WebUtils
#web#xss#nodejs#cookie-theft
 DiceCTF 2021 24.82 Web files wu 3
xss_it
#ejs-ssti#xss#xs-leak
 RCTF 2021 – Web files wu 1
giita
#prototype-pollution#xss
 TSG 2021 – Web files wu 1
simple_blog
#xss#csp-bypass#trusted-types
 zer0pts 2021 24.56 Web files wu 3
Conspiracy_Social
#web#xss#websocket#admin-bot-token-theft#csp-bypass
 CyberSecurityRumble 2024 Quals 100.00 Web files wu 1
learn_HTTP
#xss#admin-bot#jwt-secret-cracking
 Pearl 2024 23.95 Web files wu 1
Modern_Sicilian_Network
#xss#cross-subdomain
 TeamItaly 2023 24.88 Web files wu 2
Super_Admin_Panel
#xss#csrf
 TeamItaly 2023 24.88 Web files wu 1
CAFE
#parser-differential#xss
 Codegate 2022 Quals – Web files wu 1
GoogleWayback
#xss#csrf
 WeCTF 2022 36.12 Misc files wu 1
SecureStorage
#xss#postmessage#iframe-injection
 RaRCTF 2021 24.53 Web files wu 1