Cybertek CTF — Malsou9a
Full analysis of a .NET malware implant found in a memory dump — from DLL extraction and AES key recovery to C2 communication, PDF payload analysis, and JavaScript deobfuscation to retrieve the flag from Azure Blob Storage.
Securinets CTF Quals 2025
Detailed overview of the Securinets CTF Qualifications 2025. Competed with Team Mojo Jojo and achieved 38th place (5th in North Africa). This documents the overall event and links to detailed challenge writeups.
Memory Forensics with Volatility 3
A complete beginner-to-intermediate guide to memory forensics using Volatility 3. Covers installation, essential plugins, process analysis, network artifact extraction, and memory-resident malware hunting.