CTF Writeups

Forensics, malware analysis, incident response, and more from competitions worldwide.

All 7 Forensics 7 Malware 3 Reverse Engineering 3 Web 1 Crypto 4 Walkthroughs 2 #Memory Forensics
3 writeups

Securinets Quals 2026

Walkthroughs for Securinets Quals 2026 challenges: radio-signal forensics and interference cancellation, Windows memory forensics with kernel-driver reversing, and UEFI/disk forensics through an encrypted LUKS vault.

Walkthrough

Memory Forensics with Volatility 2 & 3

A complete memory forensics guide: Volatility 2 vs Volatility 3 and when to use each, installation, acquisition, and a full Windows investigation workflow with side-by-side commands for processes, network, injection, files, registry, credentials, timelines, and Linux memory.

5 writeups

Friendly Securinets CTF 2026

Walkthroughs for 41 Friendly Securinets CTF 2026 challenges: forensics from file repair to memory, TLS, cloud and hardware analysis, plus one reverse-engineering and one web challenge.

Hard

Cybertek CTF — Malsou9a

Full analysis of a .NET malware implant found in a memory dump — from DLL extraction and AES key recovery to C2 communication, PDF payload analysis, and JavaScript deobfuscation to retrieve the flag from Azure Blob Storage.

Medium 3 writeups

Securinets CTF Quals 2025

Detailed overview of the Securinets CTF Qualifications 2025. Competed with Team Mojo Jojo and achieved 38th place (5th in North Africa). This documents the overall event and links to detailed challenge writeups.

Medium 1 writeup

QnQSec CTF 2025

Overview of forensics challenges from QnQSec CTF 2025, covering memory forensics with Volatility 3, phishing incident response, and Living Off The Land (LOTL) techniques.