Skills
Tactical Dossiers

CTF Competitions & Tactical Dossiers

Browse All 40+ Individual Challenges in Directory →
DEADFACE CTF: Complete Operational Dossier

DEADFACE CTF

15 LABS // 25 FLAGS

DEADFACE CTF: Complete Operational Dossier

Network PCAP, Memory Dumps, Chrome History, MySQL & OSINT

Included Operations:
Bad Guys Be Bad & Data Go Brrrrr • Don't Leave Me Hanging (VoIP/IVR) • A Pirate's Life for Me Part 1 • Who Goes There? (Volatility 3) • Hooked (Chrome History SQLite) • File Dump 01 (OpenXML Threat Intel) • Art Heist - The Forgery • Aurora Health MySQL Suite (8 Ops) • Ghost of Squares Past (Savannah OSINT) • Uninvited Guest (SMB Poisoning Series)
DEADFACE CTFVolatility 3PCAP ForensicsSQLite Chrome
21 WriteupsOpen Dossier →
Byte Me CTF 2026: Vormir Expedition

Byte Me CTF 2026

8 LABS // 11 FLAGS

Byte Me CTF 2026: Vormir Expedition

Windows x64 Memory, Paint VAD DIB, RIFF Carving & Algorithmic QR Solvers

Included Operations:
Echoes of Vormir (Mem 1-4) • Sacrifice • The Last Memory of Vormir • Missions: Lost Edge & QR Puzzles (5 Levels)
Volatility 3Memory ForensicsQR SolversPCAP Carving
8 WriteupsOpen Dossier →
War Games 2026: ASCWG Operations Dossier

ASCWG 2026

7 LABS // 7 FLAGS

War Games 2026: ASCWG Operations Dossier

macOS Mach-O, Windows.db, ICS SCADA, CoinJoin, DeFi & Lattices

Included Operations:
The Thrushes (macOS) • Search-Dude (Windows.db) • Sensor Confession (Covert TCP) • NightShade Vendor (CoinJoin) • Cascaded Fallacy (DeFi) • Crypto Suite (SageMath) • Sol-Net Node (Burp)
Mach-OWindows.dbWiresharkCoinJoin
7 WriteupsOpen Dossier →
Kaspersky CTF 2026: Threat Labs Dossier

Kaspersky CTF

3 LABS // 3 FLAGS

Kaspersky CTF 2026: Threat Labs Dossier

Windows RAM, Apple CoreStorage & TLS GREASE Channels

Included Operations:
Ping Pong Show (PoolParty & Havoc Demon) • Ryan Guzling (CoreStorage Fusion Drive) • Time to Install Arch (TLS GREASE Channel)
Volatility 3PoolPartyCoreStorageFileVault
3 WriteupsOpen Dossier →
SunshineCTF 2026: Forensics Dossier

SunshineCTF 2026

5 LABS // 5 FLAGS

SunshineCTF 2026: Forensics Dossier

VoIP Audio, PNG Height, MSKLC Keyboard & PPTM Macros

Included Operations:
Welcome Call! (VoIP RTP) • u cut me off (PNG IHDR) • suntrail (MSKLC Snake) • NAS coal (PPTM Macro) • my eyes burn (Dead Key FSM)
VoIPPNG ForensicsMSKLCPPTM Macros
5 WriteupsOpen Dossier →
CAT CTF 2026: Advanced Incident Response

CAT CTF 2026

500 PTS // FULL IR

CAT CTF 2026: Advanced Incident Response

Multi-Stage Fileless Malware DFIR & Horus Protector

Included Operations:
HORUS Ra (Edge SQLite, PowerShell Event 400, dnfile Registry, MoDi RAT)
Incident ResponseDFIRdnfile / dnSpyHorus Protector
16 min readOpen Dossier →
PicoCTF: Forensics & Binary Archive

PicoCTF

12+ LABS

PicoCTF: Forensics & Binary Archive

Disk Forensics, IMSI Catchers, SSTV & Anti-Forensics

Included Operations:
Disko 4 • Forensics Git 0-2 • Rogue Tower • Timeline 0-1 • m00nwalk 1-2 • WebNet0 • Shark on Wire
The Sleuth KitWiresharkSSTVext4 Forensics
12+ WriteupsOpen Dossier →
DFIR & Threat Defense Labs

Blue Team / CyberDefenders

MULTI-CASE DFIR

DFIR & Threat Defense Labs

Malware Analysis, Ransomware & Threat Hunting

Included Operations:
Phobos Ransomware Reverse Engineering • Memory Dump SOC Analysis • Threat Hunting Incident Scenarios
Malware AnalysisPhobos RansomwareMemory ForensicsThreat Hunting
Lab GuidesOpen Dossier →
All CTFs Master Directory

All Competitions

40+ WRITEUPS

All CTFs Master Directory

Search, Filter & Browse All Individual Challenges

Included Operations:
Granular Search & Filter Engine Across All 40+ Individual Challenges
All CTFsDirectorySearch EngineFilters
40+ WriteupsOpen Dossier →