CTF-web

              _                                    _               ____ _____ _____                 _        
__      _____| | ___ ___  _ __ ___   ___          | |_ ___        / ___|_   _|  ___|  __      _____| |__     
\ \ /\ / / _ \ |/ __/ _ \| '_ ` _ \ / _ \         | __/ _ \      | |     | | | |_ ____\ \ /\ / / _ \ '_ \    
 \ V  V /  __/ | (_| (_) | | | | | |  __/         | || (_) |     | |___  | | |  _|_____\ V  V /  __/ |_) |   
  \_/\_/ \___|_|\___\___/|_| |_| |_|\___|          \__\___/       \____| |_| |_|        \_/\_/ \___|_.__/   

Hello, everyone! I'am wonderkun. I am intersted in web scurity and absorbed in web challenges of CTFS. Hence,I made this repo for the purpose of collecting some interesting web practises and some ideas with expansions. I will provide with source codes downloaded from CTF or written by myself , writeups in detail and exps. Aiming at giving some conveniences for beginers to start CTF and improving my personal ability , I spend a lot of time on doing this.
If you find some errors or want to give some advice, do not hesitate to contact me at follows ways :

• BLOG:wonderkun.cc
• EMIAL:[email protected]

Recommend to you an another repo which is better than this one . My-CTF-Web-Challenges

Thank you for the other contibuters:

• yichinzhu
• zer0yu
• virink

Hope you will love it and if you think it is of value, please star it . Thank you !!!

Naming Rules :

A majority of the practises is named as webXXX-YY.

• XXX represents the score of this subject. Obviously,the higher the score, the harder the subject.
• YY represents the numbering of the subject,for instance , web100-2 is the second subject of the 100 points.

Other Naming Rules

• sql_inject is the practises of sql inject collection
• exec Arbitrary command execution.
• 华山杯 This is a CTF runed by CloverSec in Xian,Shanxi province.
• shiyanba Those subject are collected from shiyanba,which is a good place to learn CTF.
• php4fun Php4fun.
• uncategorized Some uncategorized subjects.

Welcome to contribute to it.