Binary exploitation challenges
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
8,303 in the index. The 200 below are ranked by how many independent published solutions exist - which is the right order for learning, not for difficulty. A challenge with nine writeups gives you nine explanations of the same technique to compare; a harder one nobody documented gives you none.
- PSRF-as-pwnnoxCTF 2018118 writeups
- SCVCSAW CTF Qualification Round 201723 writeups
- pwn1TAMUctf 19 201922 writeups
- shell->codeCSAW CTF Qualification Round 201822 writeups
- pwn5TAMUctf 19 201921 writeups
- Shell this!DownUnderCTF 202020 writeups
- pwn3TAMUctf 19 201920 writeups
- bigboyCSAW CTF Qualification Round 201820 writeups
- CanaryångstromCTF 202019 writeups
- get it? CSAW CTF Qualification Round 201819 writeups
- babyropDiceCTF 202118 writeups
- coffer-overflow-0redpwnCTF 202018 writeups
- the-libraryredpwnCTF 202018 writeups
- BaskinRobins31Codegate CTF 2018 Preliminary18 writeups
- pwn5TAMUctf 18 201818 writeups
- pilotCSAW CTF Qualification Round 201718 writeups
- Dear diaryIceCTF 201618 writeups
- coffer-overflow-1redpwnCTF 202017 writeups
- Return to whatDownUnderCTF 202017 writeups
- roppityCSAW CTF Qualification Round 202017 writeups
- pwn4TAMUctf 19 201917 writeups
- Rolling AroundDownUnderCTF 202516 writeups
- ChainblockcorCTF 202116 writeups
- give_away_1SharkyCTF 202016 writeups
- secret-flagredpwnCTF 202016 writeups
- babyheap0CTF/TCTF 2018 Quals16 writeups
- SFTPGoogle Capture The Flag 2018 (Quals)16 writeups
- baby-0x41414141BackdoorCTF 201716 writeups
- TempleTUCTF 201716 writeups
- write-flag-whereGoogle Capture The Flag 202315 writeups
- BabierstepsNahamCon CTF 202215 writeups
- BabystepsNahamCon CTF 202215 writeups
- Not Beginner's Stackzer0pts CTF 202115 writeups
- TranquilångstromCTF 202115 writeups
- coffer-overflow-2redpwnCTF 202015 writeups
- pwn6TAMUctf 19 201915 writeups
- profileSECCON 2018 Online CTF15 writeups
- butterflyPlaidCTF 201615 writeups
- Simple CalcBoston Key Party CTF 201615 writeups
- PrecisionCSAW CTF Qualification Round 201515 writeups
- segfault labyrinthGoogle Capture The Flag 202214 writeups
- Tweety BirbKiller Queen CTF 202114 writeups
- baby_multCSAW CTF Qualification Round 202014 writeups
- Beginner's PwnTSG CTF 202014 writeups
- bof to the top DawgCTF 202014 writeups
- dead-canaryredpwnCTF 202014 writeups
- seashellsTJCTF 202014 writeups
- TinderTJCTF 202014 writeups
- tracingGoogle Capture The Flag 202014 writeups
- 999 BottlesRITSEC CTF 201914 writeups
- baby_boiCSAW CTF Qualification Round 201914 writeups
- pwn2TAMUctf 19 201914 writeups
- ReturnsångstromCTF 201914 writeups
- alien invasionCSAW CTF Qualification Round 201814 writeups
- CatASIS CTF Quals 201814 writeups
- loadTokyoWesterns CTF 4th 201814 writeups
- shopPlaidCTF 201814 writeups
- SuperMarimoCodegate CTF 2018 Preliminary14 writeups
- AuirCSAW CTF Qualification Round 201714 writeups
- electionSECCON 2017 Online CTF14 writeups
- Fun SignalsBackdoorCTF 201714 writeups
- Mrs. HudsonASIS CTF Finals 201714 writeups
- secure_keymanagerSECCON 2017 Online CTF14 writeups
- brohammerMidnight Sun CTF 2021 Quals13 writeups
- ControllerCyber Apocalypse 202113 writeups
- HarvesterCyber Apocalypse 202113 writeups
- outBackdoorDownUnderCTF 2021 (Online)13 writeups
- ret2basicNahamCon CTF 202113 writeups
- write what whereDownUnderCTF 2021 (Online)13 writeups
- dorsia1WPICTF 202013 writeups
- give_away_2SharkyCTF 202013 writeups
- No CanaryångstromCTF 202013 writeups
- OSRSTJCTF 202013 writeups
- SaaSNahamCon CTF 202013 writeups
- overfloatFacebook CTF 201913 writeups
- babyheapRCTF 201813 writeups
- believeMenoxCTF 201813 writeups
- Children TcacheHITCON CTF 201813 writeups
- classicSECCON 2018 Online CTF13 writeups
- Flea AttackHarekaze CTF 201813 writeups
- pwn02WhiteHat Grand Prix 2018 – Quals13 writeups
- stringerRCTF 201813 writeups
- JPEG fileSECCON 2017 Online CTF13 writeups
- Mary MortonASIS CTF Finals 201713 writeups
- greetingTokyo Westerns/MMA CTF 2nd 201613 writeups
- ROPiIceCTF 201613 writeups
- babycmdDEF CON CTF Qualifier 201513 writeups
- deluluCyber Apocalypse 2024: Hacker Royale12 writeups
- Writing on the WallCyber Apocalypse 2024: Hacker Royale12 writeups
- ShmeekyTAMUctf 202212 writeups
- babygameDownUnderCTF 2021 (Online)12 writeups
- CShellcorCTF 202112 writeups
- deadcodeDownUnderCTF 2021 (Online)12 writeups
- flippidyDiceCTF 202112 writeups
- Leaking like a sieveDownUnderCTF 2021 (Online)12 writeups
- MinefieldCyber Apocalypse 202112 writeups
- Pinch meDCTF 202112 writeups
- simultaneityredpwnCTF 202112 writeups
- stickystacksångstromCTF 202112 writeups
- Cookie MonsterDawgCTF 202012 writeups
- dorsia3WPICTF 202012 writeups
- El PrimoTJCTF 202012 writeups
- GymTJCTF 202012 writeups
- hipwnzer0pts CTF 202012 writeups
- LIBrary in CångstromCTF 202012 writeups
- NaughtyTJCTF 202012 writeups
- On LockdownDawgCTF 202012 writeups
- skywritingredpwnCTF 202012 writeups
- babystack0CTF/TCTF 2018 Quals12 writeups
- data_bankBSides Delhi CTF 201812 writeups
- shelterBackdoorCTF 201812 writeups
- BabyPwnCodegate 2017 prequals12 writeups
- beatmeonthedlDEF CON CTF Qualifier 201712 writeups
- Greg LestradeASIS CTF Finals 201712 writeups
- video_playerSECCON 2017 Online CTF12 writeups
- autobotsCSAW CTF Qualification Round 201512 writeups
- ebpPlaidCTF 201512 writeups
- echoBackdoorCTF 201512 writeups
- Baby KernelUIUCTF 202511 writeups
- ChecksumzIrisCTF 202511 writeups
- messengerLA CTF 202511 writeups
- umemoSECCON CTF 2023 Quals11 writeups
- cookie-monsterDamCTF 202111 writeups
- Mr SnowyCyber Santa is Coming to Town 202111 writeups
- ret2the-unknownredpwnCTF 202111 writeups
- bofUTCTF 202011 writeups
- kernel-rophxp CTF 202011 writeups
- KstackSECCON 2020 Online CTF11 writeups
- meowmowzer0pts CTF 202011 writeups
- my first echo serverDownUnderCTF 202011 writeups
- Notepad—VolgaCTF 2020 Qualifier11 writeups
- Revenge of PwnHITCON CTF 202011 writeups
- Stop TJCTF 202011 writeups
- zurkUTCTF 202011 writeups
- babyheap0CTF/TCTF 2019 Quals11 writeups
- babyheapDEF CON CTF Qualifier 201911 writeups
- can you guess mePlaidCTF 201911 writeups
- geniusBSidesSF 2019 CTF11 writeups
- oneSECCON 2019 Online CTF11 writeups
- slowfireBSidesSF 2019 CTF11 writeups
- VeggieTalesTAMUctf 19 201911 writeups
- ASVDBASIS CTF Finals 201811 writeups
- execve sandboxGoogle Capture The Flag 2018 (Quals)11 writeups
- Number GuessångstromCTF 201811 writeups
- pwn2TAMUctf 18 201811 writeups
- pwn3TAMUctf 18 201811 writeups
- RNote3RCTF 201811 writeups
- YAWNInCTF 201811 writeups
- Inst ProfGoogle Capture The Flag 2017 (Quals)11 writeups
- Megan-35SHA2017 CTF11 writeups
- memoBoston Key Party CTF 201711 writeups
- StartHITCON CTF 2017 Quals11 writeups
- Vuln ChatTUCTF 201711 writeups
- cheer_msgSECCON 2016 Online CTF11 writeups
- Exp 60 - EquationSolverInternetwache CTF 201611 writeups
- Secure File ReaderNuit du Hack CTF Quals 201611 writeups
- contactsCSAW CTF Qualification Round 201511 writeups
- Hanoi As A ServicePoliCTF 201511 writeups
- sushiB-Sides Vancouver 201511 writeups
- teamBackdoorCTF 201511 writeups
- BackdoorDownUnderCTF 202510 writeups
- Broken TrustSAS CTF 2025 Quals10 writeups
- hateful2Nullcon Goa HackIM 2025 CTF10 writeups
- oboeDiceCTF 2025 Quals10 writeups
- zenerational-auracorCTF 202510 writeups
- aplet123LA CTF 202410 writeups
- basic-overflowUofTCTF 202410 writeups
- Faulty KernelDownUnderCTF 202410 writeups
- high frequency troublespicoCTF 2024picoctfsolutions.comworked solution
- Pet CompanionCyber Apocalypse 2024: Hacker Royale10 writeups
- Rocket Blaster XXXCyber Apocalypse 2024: Hacker Royale10 writeups
- kmemoSECCON CTF 2023 Quals10 writeups
- TypopidekCTF 2022* 202310 writeups
- babyfileSECCON CTF 2022 Quals10 writeups
- BabypfSECCON CTF 2022 Quals10 writeups
- Just In KernelDownUnderCTF 2022 (Online) 10 writeups
- qKarachterCrewCTF 202210 writeups
- StacklessNahamCon CTF 202210 writeups
- veryfastvmb01lers CTF 202210 writeups
- Baby bofDCTF 202110 writeups
- CoffeeTSG CTF 202110 writeups
- klibrary3kCTF-202110 writeups
- lkgitTSG CTF 202110 writeups
- Nightclubpbctf 202110 writeups
- OversightDownUnderCTF 2021 (Online)10 writeups
- printf-pleaseredpwnCTF 202110 writeups
- Procrastination SimulatorCSAW CTF Qualification Round 202110 writeups
- Thanksgiving DinnerAUCTF 202010 writeups
- Amazing ROPpbctf 202010 writeups
- Blind Shell#kksctf open 202010 writeups
- Bop ItångstromCTF 202010 writeups
- DangerousNahamCon CTF 202010 writeups
- dualHITCON CTF 202010 writeups
- House of MadnessAUCTF 202010 writeups
- newPaXDarkCTF 202010 writeups
- Return to what's revengeDownUnderCTF 202010 writeups
- SchlossbergCavessaarCTF 202010 writeups
- simple echoserver0CTF/TCTF 2020 Quals 10 writeups
- ? Trick or Treat ?HITCON CTF 2019 Quals10 writeups
- Chain of RopeångstromCTF 201910 writeups
Looking for a specific event? Browse all events.