CTF Writeups

Forensics, malware analysis, incident response, and more from competitions worldwide.

All 7 Forensics 7 Malware 4 Reverse Engineering 3 Web 1 Crypto 4 Walkthroughs 2
4 writeups

Securinets Quals 2026

Walkthroughs for Securinets Quals 2026 challenges: SDR interference cancellation, Windows memory and kernel-driver analysis, UEFI/LUKS disk forensics, and a full Linux intrusion reconstructed from packet captures through malware.

Walkthrough

Memory Forensics with Volatility 2 & 3

A complete memory forensics guide: Volatility 2 vs Volatility 3 and when to use each, installation, acquisition, and a full Windows investigation workflow with side-by-side commands for processes, network, injection, files, registry, credentials, timelines, and Linux memory.

Walkthrough

Steganography for CTFs & Forensics

A practical steganography guide: a repeatable methodology, then images (PNG/JPEG/GIF/BMP), audio (spectrograms, LSB, DTMF, SSTV), text and whitespace, documents, and password attacks, with the real commands and small Python scripts for each technique.

5 writeups

Friendly Securinets CTF 2026

Walkthroughs for 41 Friendly Securinets CTF 2026 challenges: forensics from file repair to memory, TLS, cloud and hardware analysis, plus one reverse-engineering and one web challenge.

Hard

Cybertek CTF — Malsou9a

Full analysis of a .NET malware implant found in a memory dump — from DLL extraction and AES key recovery to C2 communication, PDF payload analysis, and JavaScript deobfuscation to retrieve the flag from Azure Blob Storage.

Medium 3 writeups

Securinets CTF Quals 2025

Detailed overview of the Securinets CTF Qualifications 2025. Competed with Team Mojo Jojo and achieved 38th place (5th in North Africa). This documents the overall event and links to detailed challenge writeups.

Medium 1 writeup

QnQSec CTF 2025

Overview of forensics challenges from QnQSec CTF 2025, covering memory forensics with Volatility 3, phishing incident response, and Living Off The Land (LOTL) techniques.