Pulgaa

Mohamed Aziz Haddadi.

Software engineering student working across security. I investigate intrusions, reverse malware and build security tools, then write up every step.

Mohamed Aziz Haddadi
1st Tunisia, Securinets CTF Quals 2026
1st Advanced Cybersphere CTF
Top 3 Darkest Hour 2026
Top 1% TryHackMe, global ranking

Latest on the blog

Visit the blog
  1. WriteupSecurinets Quals 2026 Silent Tone Three radio transmitters talk over each other on one 433 MHz channel. Read the protocol out of a USB log, repair a logic-analyser recording that silently dropped samples, decode the loud decoy, subtract it, and peel the two quiet transmitters apart to rebuild an encrypted flag. Hard 35 min
  2. WriteupSecurinets Quals 2026 dumppwn A Windows 11 memory dump caught one second after a kernel exploit ran. Convert the unusual RDMP dump format, spot a fake system process, read its XOR key out of the binary, and decrypt a secret straight out of physical memory, while ten AI-bait decoy flags try to pull you off course. Medium 16 min
  3. WalkthroughSep 2026 Memory Forensics with Volatility 2 & 3 A complete memory forensics guide: Volatility 2 vs Volatility 3 and when to use each, installation, acquisition, and a full Windows investigation workflow with side-by-side commands for processes, network, injection, files, registry, credentials, timelines, and Linux memory. 37 min
  4. WalkthroughSep 2026 Steganography for CTFs & Forensics A practical steganography guide: a repeatable methodology, then images (PNG/JPEG/GIF/BMP), audio (spectrograms, LSB, DTMF, SSTV), text and whitespace, documents, and password attacks, with the real commands and small Python scripts for each technique. 27 min
  5. WriteupFriendly Securinets CTF 2026 Forensics Wave 1 Seven easy-to-medium forensics challenges: header repair, layered encodings, nested archives, a disguised shell archive, low-contrast stego, Morse audio, and a PNG/PDF polyglot. Easy 13 min

Featured projects

All projects

Get to know me

Open to security roles

Internships and full-time positions in incident response, detection engineering, malware research or security tooling, or a CTF team that needs another player.

azizhaddadi10@gmail.com