Skip to content
ctfpal
Writeup index

Web challenges

Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.

3,186 in the index. The 200 below are ranked by how many independent published solutions exist - which is the right order for learning, not for difficulty. A challenge with nine writeups gives you nine explanations of the same technique to compare; a harder one nobody documented gives you none.

Looking for a specific event? Browse all events.