Featured
3 HubsWriteup Hubs & Categories

13 CHALLENGESPicoCTF 2019
File Repair • Stego • PCAP • Audio
PicoCTF
My complete writeups for all 13 PicoCTF forensics challenges. Includes manual hex breakdowns, Wireshark steps, Python solver scripts, and one-liners.
PNG RepairGhidraWiresharkSSTVLSB Stego
⏱ 13 WriteupsView Hub →

4 CHALLENGESQualifications
macOS • Windows • Network • Bitcoin
ASCWG 2026 CTF
Solutions for the Arab Security Cyber Wargames 2026 forensics and OSINT tracks: reversing a trojanized Signal app, ESE database carving, and Bitcoin mixer tracing.
Mach-OWindows.dbTRACE-7TCP Urg
⏱ 4 WriteupsView Hub →

3 CHALLENGESForensics Track
RAM Dumps • CoreStorage • TLS GREASE
Kaspersky CTF 2026
Complete solutions for Kaspersky CTF 2026 forensics: PoolParty injection into Acrobat, Apple CoreStorage Fusion Drive recovery, and TLS GREASE covert channel decryption.
Volatility 3PoolPartyHavoc DemonCoreStorageTLS GREASE
⏱ 3 WriteupsView Hub →

HANDS-ON LABSBlue Team
Malware • Memory • Incident Response
DFIR & Threat Labs
Real-world forensic investigations, malware reverse engineering, and threat hunting writeups from CyberDefenders and practical DFIR scenarios.
Malware AnalysisPhobos RansomwareMemory ForensicsThreat Hunting
⏱ Lab GuidesView Hub →