CTF EVENT: Insomni’hack Teaser 2022 DIFFICULTY: Medium/hard CATEGORY: Forensics / Misc INTRODUCTION: A few weeks ago I had the opportunity to play the insomni’hack teaser 2022. shana and I managed to solve one of the two Forensics challenges of this CTF. …

PLATFORM: TryHackMe LINK ROOM: https://tryhackme.com/room/mastermindsxlq DIFFICULTY: Medium CATEGORY: Network Forensics TOOLS USED: Brim INTRODUCTION: Today let’s learn something new. Let’s do Network Forensics but this time not using Wireshark but Brim. But first, what is Brim? Here is a little description that I found on their GitHub Page. “Brim is an…

CTF EVENT : DownUnderCTF 2021 DIFFICULTY: Easy CATEGORY: FORENSICS POINTS: 100 CHALLENGE: Our machine that makes QR Codes started playing up then it just said “PC LOAD LETTER” and died. This is all we could recover… Author: xXl33t_h@x0rXx Download: challenge.gif

CTF EVENT : DownUnderCTF 2021 DIFFICULTY: Easy CATEGORY: FORENSICS POINTS: 100 CHALLENGE: Do the loop doop doop… Flag format: The STRING you end up with after solving challenge, case insensitive. File to download Download file: monorail.wav When we listen to the audio, we can hear a morse code in the background…

CTF EVENT : DownUnderCTF 2021 DIFFICULTY: Medium CATEGORY: OSINT POINTS: 100 CHALLENGE: We received intel that the accomplice we have been following is meeting with the ringleader of RaaS operation, they shared this photo online a few years back — believed to be the view from their apartment building (hideout). Between…

CTF EVENT : DownUnderCTF 2021 DIFFICULTY: Easy CATEGORY: Misc POINTS: 100 CHALLENGE: Can you find Babushka’s missing vodka? It’s buried pretty deep, like 1000 steps, deep. Download: flag.txt Author: Crem + z3kxTa The idea here is quite simple, when you check the file type of the flag.txt you will realize that…

CTF EVENT: H@cktivity Con CTF 2021 DIFFICULTY: Medium CATEGORY: FORENSICS AUTHOR: @congon4tor#2334 (Discord) INTRODUCTION: Challenge: My computer crashed and I lost everything I was doing for work… We need to download a .bin file (this is a ~2 GB file). You can download this file here. The challenge provides us an…

CTF EVENT: CyBRICS CTF 2021 DIFFICULTY: Easy CATEGORY: MISC POINTS: 50 LINK: https://scanner-cybrics2021.ctf.su/ The task says that we need to play a game to get the flag. However, we can only see the flag at level 5. Let’s play!. When we open the link, we see a kind of scan…

CTF EVENT: CyberThreatForce 2021 DIFFICULTY : Easy/Medium CATEGORY: FORENSICS and a bit of OSINT INTRODUCTION: For this writeup, I wrote about something that I never did before, FORENSICS! I would like to say that it was my first time using Volatility and doing Memory Forensics. I put a lot of details…