| Name | Points | Tags | Writeups | |
|---|---|---|---|---|
| babyheapng | 500 | mallocng musl-1.2.2 pwn heap | 0 | |
| woodchipper | 500 | rev vm | 0 | |
| cipher-master | 500 | crypto linear-cryptanalysis | 0 | |
| moar-horse-5 | 500 | blockchain integer-overflow pwn solana | 0 | |
| sm-paint | 500 | web rev wasm | 0 | |
| babyheap | 500 | musl-1.1.24 pwn heap | 1 | |
| boxed-python | 496 | python rev | 1 | |
| fried-clams | 491 | misc shellcode namespaces | 1 | |
| fast-web | 480 | web rev | 0 | |
| merkle-master | 480 | merkle-tree crypto | 0 | |
| copper-master | 436 | coppersmith padding crypto rsa | 0 | |
| 7sckp | 436 | crypto padding-oracle | 0 | |
| complex-secrets | 395 | complex_numbers crypto secret-sharing | 0 | |
| mac-master | 386 | collision md5 crypto mac | 1 | |
| morph-master | 350 | homomorphic paillier crypto | 1 | |
| block-game | 350 | game rev java | 1 | |
| factor-master | 299 | factoring crypto | 1 | |
| sneaker-zipper | 256 | zip forensics | 4 | |
| vacation-2 | 233 | buffer-overflow ret2libc pwn | 1 | |
| take-a-l | 155 | rev c c | 0 | |
| spongebob | 153 | png forensics | 1 | |
| flimsy-fingered-latin-teacher | 132 | keyboard-layout crypto | 1 | |
| cool-school | 129 | png forensics stegsolve | 4 | |
| rsa-apprentice | 126 | factoring crypto rsa | 2 | |
| fake-geoguessr | 121 | exif metadata forensics | 4 | |
| lamb-sauce | 116 | web inspect-element | 1 | |
| viewy | 312 | web template-injection | 1 | |
| portalstrology | 361 | web jwt | 1 | |
| photoable | 270 | web path-traversal | 1 | |
| mmocc | 333 | javascript web path-traversal | 2 | |
| lamb-sauce | 116 | web inspect-element | 3 | |
| jokster | 441 | cssinjection web csp | 1 | |
| game-leaderboard | 174 | sqli web | 3 | |
| fruit-store | 287 | web prototype-pollution | 1 | |
| fleecebook | 378 | web csp xss | 1 | |
| dnu-merch | 458 | web xs-search | 1 | |
| ascordle | 198 | sqli web | 1 | |
| analects | 246 | sqli web | 1 | |
| cheapest-cookies-2 | 253 | misc algo djikstra | 1 | |
| favorite-color | 185 | buffer-overflow pwn | 1 | |
| vacation-1 | 175 | buffer-overflow pwn | 2 | |
