Writeup Archive

> ./resources/

• Tool Setup

  Analysis environment, installation notes, and setup guides for tools used across the writeups.
  Setup Tools

> ./BelkaCTF №7/

DFIR series revisiting the live CTF with freely available tools.

• Series index

  Challenge list, and series notes.
  DFIR Windows
• Locker

  Finding and validating a rogue executable in memory using MemProcFS.
  Malware MemProcFS
• Sample

  Home
  DFIR
• Whoami

  Recovering the interactive username and hostname from a RAM dump with MemProcFS.
  Memory MemProcFS

> ./SrdnlenCTF/

• MSN Revive

  Missing authorization combined with a path canonicalization/parser differential.
  Web API Burp Suite