orangetw/My-CTF-Web-Challenges resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

2857 stars · 480 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A curated collection of CTF web challenges created by Orange Tsai, including source code, ideas, and write-ups from HITCON and other competitions. It serves as a learning resource for web security exploitation techniques, primarily in PHP.

Use cases

• practice web exploitation challenges
• learn PHP security vulnerabilities
• study CTF write-ups and solutions
• prepare for capture the flag competitions
• understand SSRF and SQL injection techniques
• train offensive web security skills

When to choose

• you want real-world CTF web challenges with solutions
• you are studying PHP exploitation and web security
• you are preparing for CTF competitions

When to avoid

• you need production-ready security tooling
• you want a vulnerability scanner or automated pentest tool
• you need licensed software for commercial use (no license provided)

Facets

learning-resource · maturity active

security penetration-testing developer-tools security penetration-testing developer-tools education php cross-platform ctf web-security capture-the-flag writeups php vulnerability-research hitcon web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="orangetw/My-CTF-Web-Challenges")