Skip to main content

# Challenges

Capture the flags. Prove your skills.

Filters:

107 challenges found

Page 5/6

Web Medium

KidLab

A colorful web app for kids with user accounts and a reporting system. But who is reading those reports?

150 pts 0 solves
Web Medium

Inca Empire

The Inca Empire web portal renders user input in unexpected ways. What if the template engine processes more than it should?

150 pts 1 solves
Web Medium

HTTP

Not everything is visible on the surface. Look closer at how the server responds.

150 pts 1 solves
Misc Medium

Hangman

A classic game of Hangman. The word might be simpler than you think.

150 pts 1 solves
Web Easy

Forbidden 1

Access denied. The admin page is off limits.

50 pts 3 solves
Web Expert

Executioner 3

The final executioner. Almost everything useful is blocked. Almost.

400 pts 0 solves
Web Hard

Executioner 2

The executioner returns with tighter restrictions. Spaces and slashes are no longer your friends.

250 pts 0 solves
Web Hard

Executioner 1

A command execution service with a filter. Find a way to run what you need despite the restrictions.

250 pts 0 solves
Web Hard

Dev Academy

NovaDev Academy just launched their new website. They are running a suspiciously specific version of PHP.

250 pts 0 solves
Web Medium

Decimals

A number that is simultaneously less than and greater than a threshold. PHP has some interesting ideas about numbers.

150 pts 1 solves
Web Hard

Curse Hunter

A cursed API requires a specific identity to reveal its secrets. Can you become someone you are not?

250 pts 0 solves
Web Hard

CTF Market

Welcome to the CTF Market! Browse products, apply coupons, and upgrade your account. Every good shop has its weak spots.

250 pts 0 solves
Crypto Medium

Predictable Randomness

Randomness is only as strong as the algorithm behind it.

150 pts 0 solves
Web Medium

Circus 2

String comparison protects the flag. But not all comparisons behave the way you expect.

150 pts 0 solves
Web Medium

Circus 1

Two values must produce the same hash, but they cannot be equal. The comparison operator holds the key.

150 pts 1 solves
Web Medium

By Proxy

A web proxy forwards your requests to an internal service. What happens when you control where it goes?

150 pts 0 solves
Misc Medium

Bear Ninja Cowboy 4

The game adapts to your play style. Can you outsmart an opponent that learns from your moves?

150 pts 0 solves
Misc Medium

Bear Ninja Cowboy 3

The computer picks its moves using a random number generator. But is it truly random?

150 pts 0 solves
Misc Easy

Bear Ninja Cowboy 2

Another round of Bear-Ninja-Cowboy. The rules seem familiar, but the input handling has a subtle flaw.

50 pts 1 solves
Misc Easy

Bear Ninja Cowboy

A rock-paper-scissors variant where Bears, Ninjas, and Cowboys battle it out. Win 30 rounds in a row to claim the flag.

50 pts 1 solves
« Prev Page 5 of 6 Next »