The following content is in the ctf-web category:

Breaking the CTF framework - CSAW 2015 web 600 writeup | Sep 21, 2015

First Ashley Madison now Weebdate - CSAW 2015 web 500 writeup | Sep 21, 2015

Bypassing PHP strcmp() - CSAW 2015 web 200 writeup | Sep 21, 2015

Local File inclusion + File Upload = Remote Code execution - MMACTF 2015 web 300 writeup | Sep 7, 2015

Executing php using script tags - MMACTF 2015, Uploader, web 100 writeup | Sep 7, 2015