DEADFACE CTF • BYTE ME CTF • SUNSHINECTF • KASPERSKY • ASCWG • PICOCTF

CTF Competitions

All CTF challenge solutions and operational breakdowns gathered in one place. Filter by competition, tool, or forensic category.

Category:

Showing 49 of 49 Challenges

DEADFACE CTF: Complete Operational Dossier

DEADFACE CTF • 15 LABS // 25 FLAGS

Network PCAP, Memory Dumps, Chrome History, MySQL & OSINT

DEADFACE CTFVolatility 3PCAP Forensics

Byte Me CTF 2026: Vormir Expedition

Byte Me CTF 2026 • 8 LABS // 11 FLAGS

Vormir Expedition: Memory, Audio & Algorithmic QR

Volatility 3Memory ForensicsQR Solvers

Echoes of Vormir (Mem 1-4)

Byte Me CTF 2026 • 500 PTS

Windows x64 Kernel Dump & MS Paint VAD Carving

Volatility 3Memory ForensicsVAD DIB Carve

Sacrifice

Byte Me CTF 2026 • 200 PTS

Localhost FTP Reconstruction & JPEG Metadata Payload

WiresharkFTP CarvePCAP Forensics

The Last Memory of Vormir

Byte Me CTF 2026 • 300 PTS

Speech Reversal Transcription & Appended RIFF Carving

Audio ForensicsWhisperRepeated XOR

Missions: Lost Edge & QR Puzzles

Byte Me CTF 2026 • 5 LEVELS // 5 FLAGS

5 Escalation Tiers: 3x3 to 7x7 Algorithmic Assembly

PythonOpenCVSAT / Backtracking

SunshineCTF 2026: Forensics Dossier

SunshineCTF 2026 • 5 LABS // 5 FLAGS

VoIP Audio, PNG Height, MSKLC Keyboard & PPTM Macros

VoIPPNG ForensicsMSKLC

Welcome Call!

SunshineCTF 2026 • 100 PTS

VoIP Telephony Forensics & Audio Backmasking

WiresharkVoIP ForensicsSIP / SDP

u cut me off

SunshineCTF 2026 • 150 PTS

PNG IHDR Height Tampering & CRC32 Repair

PNG ForensicsIHDR ChunkCRC32

suntrail

SunshineCTF 2026 • 250 PTS

MSKLC Keyboard Layout Snake Trail Walkthrough

MSKLCKeyboard LayoutsUnicode Analysis

NAS coal

SunshineCTF 2026 • 425 PTS

PPTM Macro Forensics & PowerShell Base64 Deobfuscation

olevbaoletoolsVBA Macros

my eyes burn

SunshineCTF 2026 • 300 PTS

MSKLC Dead Key Finite State Machine

MSKLCDead KeysFinite State Machine

HORUS Ra

CAT CTF 2026 • 500 PTS

Multi-Stage Fileless Malware DFIR & Horus Protector

Incident ResponseDFIRMemory Forensics

Disko 4

PicoCTF • 300 PTS

FAT32 Deleted File Recovery & Inode Carving

The Sleuth KitFAT32 Forensicsfls

Forensics Git 0

PicoCTF • 350 PTS

Linux Disk Partitioning & Inode Git Carving

The Sleuth Kitmmlsfls

Forensics Git 1

PicoCTF • 350 PTS

Tracing Deleted Commits & Git Object Carving

The Sleuth KitGit Reflogszlib Inflate

Forensics Git 2

PicoCTF • 350 PTS

Recovering Deleted Directory Trees & Git Artifacts

The Sleuth KitGit Subtreeszlib Inflate

Rogue Tower

PicoCTF • 350 PTS

Cellular IMSI Catcher & KPA Decryption

WiresharktsharkIMSI Catcher

Timeline 0

PicoCTF • 300 PTS

Timestomping & Filesystem Outlier Analysis

The Sleuth Kitflsmactime

Timeline 1

PicoCTF • 300 PTS

Linux Filesystem MAC Timeline & Inode Carving

The Sleuth Kitflsmactime

Kaspersky CTF 2026: Threat Labs Dossier

Kaspersky CTF • 3 LABS // 3 FLAGS

Windows RAM, Apple CoreStorage & TLS GREASE Channels

Volatility 3PoolPartyCoreStorage

Ping Pong Show

Kaspersky CTF • 500 PTS

PoolParty & Havoc Demon Reversing

Volatility 3PoolPartyHavoc Demon

Ryan Guzling

Kaspersky CTF • 500 PTS

CoreStorage Fusion Drive & FileVault

CoreStorageFileVaultHFS+

Time to Install Arch

Kaspersky CTF • 500 PTS

TLS GREASE Covert Channel & DLL Sideloading

WiresharkDLL SideloadingTLS GREASE

War Games 2026: ASCWG Operations Dossier

ASCWG 2026 • 7 LABS // 7 FLAGS

macOS Mach-O, Windows.db, ICS SCADA, CoinJoin, DeFi & Lattices

Mach-OWindows.dbWireshark

The Thrushes

ASCWG 2026 • HARD

Mach-O Reverse Engineering

GhidraMach-OmacOS Triage

Search-Dude

ASCWG 2026 • MEDIUM

Windows.db & PCA AppHelp

Windows.dbESE DatabasePCA Telemetry

Sensor Confession

ASCWG 2026 • MEDIUM

Covert Channel Smuggling

WiresharktsharkTCP Urgent Pointer

NightShade Vendor

ASCWG 2026 • MEDIUM

CoinJoin Mixer De-Anonymization

TRACE-7CoinJoin MixingEsplora API

Cascaded Fallacy

ASCWG 2026 • 500 PTS

DeFi Reentrancy & EVM Trace Carving

SolidityEVM OpcodesReentrancy

Crypto Suite

ASCWG 2026 • 450 PTS

Lattice Reduction & Coppersmith Small Roots

SageMathLattice ReductionLLL Algorithm

Sol-Net Node

ASCWG 2026 • 350 PTS

Node Auth Bypass & OTP Webhook Interception

Burp SuiteAuth BypassHost Header Injection

m00nwalk

PicoCTF • 250 PTS

Apollo 11 SSTV Demodulation

SSTVScottie 1Audio Forensics

m00nwalk2

PicoCTF • 300 PTS

SSTV Audio Demodulation & Steghide LSB Carving

SSTVsteghideAudio Forensics

WebNet0

PicoCTF • 350 PTS

TLS Decryption & RSA Key Injection

WiresharktsharkTLS Decryption

B1g_Mac

PicoCTF • 350 PTS

NTFS MACB Timestomping & Zip Extra Fields

NTFS MACBTimestompingFILETIME

c0rrupt

PicoCTF • 250 PTS

PNG Specification & Hex Patching

HexEd.it / HxDpngcheckPNG Spec

extensions

PicoCTF • 150 PTS

MIME-Type & Magic Byte Triage

file / statMagic BytesHex Triage

Investigative Reversing 0

PicoCTF • 300 PTS

ELF Binary Disassembly & Byte Shift

GhidraGDBx86-64 Decompilation

Investigative Reversing 1

PicoCTF • 350 PTS

Multi-File Stego Injection

GhidraMulti-file StegoByte Offset Carving

Investigative Reversing 2

PicoCTF • 400 PTS

BMP LSB Steganography & Cipher

GhidraBMP SpecBit Manipulation

Investigative Reversing 3

PicoCTF • 450 PTS

State Machine & Interleaved Bits

GhidraState Machine ReversalBit Inversion

like1000

PicoCTF • 250 PTS

Matryoshka Tar Bomb Decompression

Python tarfileBash One-LinerArchive Forensics

Shark on Wire 1

PicoCTF • 150 PTS

UDP Stream Follow & Decoy Triage

WiresharkUDP Stream FollowDecoy Trapping

Shark on Wire 2

PicoCTF • 300 PTS

UDP Destination Port Stego

ScapyWiresharkPort Steganography

So Meta

PicoCTF • 150 PTS

Exif & XMP Metadata Carving

exiftoolstringsPNG Metadata

What Lies Within

PicoCTF • 150 PTS

LSB RGB Channel Extraction

zstegLSB SteganographyPillow

WhitePages

PicoCTF • 250 PTS

Unicode Whitespace Binary Decoder

Unicode StegoHex AnalysisPython Binary Decoder

Phobos Ransomware Analysis

Threat Labs • ADVANCED

Unpacking, Decrypting & Threat Intel

GhidraRansomware DFIRx64dbg