#forensic

64 writeups

Ufo Ctf School 2016/Find Me 100

Ufo Ctf School 2016 — Find Me 100

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Trend Micro Ctf Quals 2016/Forensic 100

Trend Micro Ctf Quals 2016 — Forensic 100

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Securinets Ctf Quals 2016/Mem Dump 90

Securinets Ctf Quals 2016 — Mem Dump 90

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Seccon Ctf Quals 2016/Voip 100

Seccon Ctf Quals 2016 — Voip 100

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Seccon Ctf Quals 2016/Randomware 300

Seccon Ctf Quals 2016 — Randomware 300

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Seccon Ctf Quals 2016/Memory Analysis 100

Seccon Ctf Quals 2016 — Memory Analysis 100

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Sctf 2016 Q1/Rain Or Shine 35

Sctf 2016 Q1 — Rain Or Shine 35

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Sctf 2016 Q1/Musical Penguins 45

Sctf 2016 Q1 — Musical Penguins 45

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Sctf 2016 Q1/Failed Compression 80

Sctf 2016 Q1 — Failed Compression 80

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Sctf 2016 Q1/Corruption 100

Sctf 2016 Q1 — Corruption 100

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Sctf 2016 Q1/Banana Boy 20

Sctf 2016 Q1 — Banana Boy 20

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Pwn2win Ctf 2016/Samuel Riff Breese 80

Pwn2win Ctf 2016 — Samuel Riff Breese 80

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Pwn2win Ctf 2016/Painel Message 50

Pwn2win Ctf 2016 — Painel Message 50

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Pwn2win Ctf 2016/Hidden In Plain Sight 40

Pwn2win Ctf 2016 — Hidden In Plain Sight 40

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Pwn2win Ctf 2016/Dump 50

Pwn2win Ctf 2016 — Dump 50

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Mma Ctf 2nd 2016/Rescue Data 1 Deadnas 50

Mma Ctf 2nd 2016 — Rescue Data 1 Deadnas 50

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Mma Ctf 2nd 2016/Broken Ntfs 500

Mma Ctf 2nd 2016 — Broken Ntfs 500

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Juniors Ctf 2016/The Good The Bad And The Junkman 500

Juniors Ctf 2016 — The Good The Bad And The Junkman 500

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Juniors Ctf 2016/Restricted Area 500

Juniors Ctf 2016 — Restricted Area 500

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Juniors Ctf 2016/Oh Shssh 500

Juniors Ctf 2016 — Oh Shssh 500

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Juniors Ctf 2016/Lost Everything But Hope 500

Juniors Ctf 2016 — Lost Everything But Hope 500

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Juniors Ctf 2016/Dirty Repo 300

Juniors Ctf 2016 — Dirty Repo 300

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Juniors Ctf 2016/Clone Attack 300

Juniors Ctf 2016 — Clone Attack 300

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Hackcon Ctf 2016/Note To Self 250

Hackcon Ctf 2016 — Note To Self 250

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Hackcon Ctf 2016/In Rainbows 150

Hackcon Ctf 2016 — In Rainbows 150

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Bioterra Ctf 2016/Screensh00ter 50

Bioterra Ctf 2016 — Screensh00ter 50

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Asis Ctf Quals 2016/Pottage 179

Asis Ctf Quals 2016 — Pottage 179

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Asis Ctf Quals 2016/Odrrere 166

Asis Ctf Quals 2016 — Odrrere 166

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Asis Ctf Quals 2016/Firtog 109

Asis Ctf Quals 2016 — Firtog 109

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Asis Ctf 2016/Typo 131

Asis Ctf 2016 — Typo 131

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Asis Ctf 2016/Sky Blue 73

Asis Ctf 2016 — Sky Blue 73

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Asis Ctf 2016/Raw Vaganism 89

Asis Ctf 2016 — Raw Vaganism 89

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Asis Ctf 2016/P1ng 121

Asis Ctf 2016 — P1ng 121

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Asis Ctf 2016/One Bad Son 127

Asis Ctf 2016 — One Bad Son 127

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Abctf 2016/Zippy 120

Abctf 2016 — Zippy 120

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Abctf 2016/Passwordpdf 80

Abctf 2016 — Passwordpdf 80

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Abctf 2016/Moonwalk 60

Abctf 2016 — Moonwalk 60

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Abctf 2016/Just Open It 15

Abctf 2016 — Just Open It 15

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Abctf 2016/Gz 30

Abctf 2016 — Gz 30

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Abctf 2016/Best Ganondorf 50

Abctf 2016 — Best Ganondorf 50

Imported from GitHub (ctfs/write-ups-2016).

MiscGitHub#misc #forensic #githubJun 5, 2026

Insomnihack Teaser 2017/The Great Escape Part1 50

Insomnihack Teaser 2017 — The Great Escape Part1 50

Imported from GitHub (ctfs/write-ups-2017).

MiscGitHub#misc #forensic #githubJun 5, 2026

Insomnihack Teaser 2017/Secret In 200

Insomnihack Teaser 2017 — Secret In 200

Imported from GitHub (ctfs/write-ups-2017).

MiscGitHub#misc #forensic #githubJun 5, 2026

Hack Dat Kiwi Ctf 2017/Pimple Stegano 180

Hack Dat Kiwi Ctf 2017 — Pimple Stegano 180

Imported from GitHub (ctfs/write-ups-2017).

MiscGitHub#misc #forensic #githubJun 5, 2026

Hack Dat Kiwi Ctf 2017/Eluware 1 100

Hack Dat Kiwi Ctf 2017 — Eluware 1 100

Imported from GitHub (ctfs/write-ups-2017).

MiscGitHub#misc #forensic #githubJun 5, 2026

Bitsctf 2017/Woodstock 2 55

Bitsctf 2017 — Woodstock 2 55

Imported from GitHub (ctfs/write-ups-2017).

MiscGitHub#misc #forensic #githubJun 5, 2026

Bitsctf 2017/Woodstock 1 10

Bitsctf 2017 — Woodstock 1 10

Imported from GitHub (ctfs/write-ups-2017).

MiscGitHub#misc #forensic #githubJun 5, 2026

Bitsctf 2017/Tom And Jerry 50

Bitsctf 2017 — Tom And Jerry 50

Imported from GitHub (ctfs/write-ups-2017).

MiscGitHub#misc #forensic #githubJun 5, 2026

Bitsctf 2017/Remember Me 60

Bitsctf 2017 — Remember Me 60

Imported from GitHub (ctfs/write-ups-2017).

MiscGitHub#misc #forensic #githubJun 5, 2026

Bitsctf 2017/Ghost In The Machine 60

Bitsctf 2017 — Ghost In The Machine 60

Imported from GitHub (ctfs/write-ups-2017).

MiscGitHub#misc #forensic #githubJun 5, 2026

Bitsctf 2017/Flagception 30

Bitsctf 2017 — Flagception 30

Imported from GitHub (ctfs/write-ups-2017).

MiscGitHub#misc #forensic #githubJun 5, 2026

Bitsctf 2017/Black Hole 10

Bitsctf 2017 — Black Hole 10

Imported from GitHub (ctfs/write-ups-2017).

MiscGitHub#misc #forensic #githubJun 5, 2026

Nsec 2018/Communication From Earth 5

Nsec 2018 — Communication From Earth 5

Imported from GitHub (ctfs/write-ups-2018).

MiscGitHub#misc #forensic #githubJun 5, 2026

HASBLCTF26/Quick Response

HASBLCTF26 — Quick Response

Team: Abdelkader · CTFtime rating: not rated · Source: https://ctftime.org/writeup/40839 · Topics: writeup, ctf, forensic, forensics

ForensicsBlog#forensic #forensics #ctfJun 4, 2026

Root-Me/DNS exfiltration·30pts

DNS exfiltration — Root-Me

Forensics scenario DNS exfiltration with disk and memory artifacts.

Forensicshard#root-me #hard #forensicMay 26, 2026

Root-Me/Logs analysis - web attack·25pts

Logs analysis - web attack — Root-Me

On Logs analysis - web attack, investigators recover fragments from an image dump.

Forensicshard#root-me #hard #forensicMay 26, 2026

Root-Me/Heist of the century·25pts

Heist of the century — Root-Me

Forensics scenario Heist of the century with disk and memory artifacts.

Forensicshard#root-me #hard #forensicMay 26, 2026

Root-Me/Find the cat·25pts

Find the cat — Root-Me

Challenge Find the cat: log triage and artifact correlation.

Forensicshard#root-me #hard #forensicMay 26, 2026

Root-Me/Windows - NTDS Secret extraction·20pts

Windows - NTDS Secret extraction — Root-Me

On Windows - NTDS Secret extraction, investigators recover fragments from an image dump.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Docker layers·20pts

Docker layers — Root-Me

Challenge Docker layers: log triage and artifact correlation.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/ICMP exfiltration·20pts

ICMP exfiltration — Root-Me

On ICMP exfiltration, investigators recover fragments from an image dump.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Command & Control - level 2·15pts

Command & Control - level 2 — Root-Me

Challenge Command & Control - level 2: log triage and artifact correlation.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Oh My Grub·15pts

Oh My Grub — Root-Me

On Oh My Grub, investigators recover fragments from an image dump.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Capture this·15pts

Capture this — Root-Me

On Capture this, investigators recover fragments from an image dump.

Forensicsmedium#root-me #medium #forensicMay 26, 2026

Root-Me/Deleted file·5pts

Deleted file — Root-Me

Challenge Deleted file: log triage and artifact correlation.

Forensicseasy#root-me #easy #forensicMay 26, 2026