Securinets CTF 2019 – Contact Me Challenge Writeup

Hello everyone, It has been a really long time since I last posted a writeup. So this was a challenge I solved a long time ago in the securinets CTF 2019. It is a fairly easy challenge but the good thing about this is that there are very few memory forensics challenges that we get... Continue Reading →

Advertisements

ISITDTU CTF Quals EASY HUSKY WriteUp

This was probably the easiest memory forensics challenge that I ever attempted. Sadly I could not get the first blood in this as I had to leave for dinner ­čśŤ Challenge Description The description does not provide anything, so let us look at the file ­čÖé Link to challenge file:┬áMega Link Solution Okay, let us... Continue Reading →

SEC-T CTF’17 G1bs0n WriteUp

This was one of the better memory forensics challenges that I tried and solved. There was not much of a big depth in this challenge but however, it tries to teach you the basic plugins of volatility. Though the writeup may look very clean and straight-forward, I was at sixes and sevens while trying out... Continue Reading →

InCTF Quals 2018 Hard-To-Get WriteUp

I had a lot of fun organizing this CTF. Just too much excitement. Many people have requested me to put out a write-up for the challenge which had only 4 solves in the end. So I'll be writing a short write-up. Challenge Description: So from the challenge, one can pretty much discover that the user... Continue Reading →

SEC-T CTF 2018 Batou Challenge WriteUp

So this is a┬á challenge which I solved in SECT CTF 2018. This challenge requires the use of tools called┬ávolatility┬áand its┬áplugins. Please feel free to read my blog on volatility┬áhere. Challenge file can be downloaded from┬áhere. The description was: "We managed to collect a dump from Bataou's computer. Try to find info/notes that can help... Continue Reading →

The Volatility Framework

Volatility is a python based command line tool that helps in analyzing virtual memory dumps. It provides a very good way to understand the importance as well as the complexities involved in Memory Forensics. Advantages of using Volatility: Runs on Windows, Linux and Mac It can be executed wherever python environment is present. Uses Fast... Continue Reading →

Basics Of Memory Forensics

What is Volatile Memory? Volatile Memory is the memory used by the system or OS during the time the device is powered on. To put it simply, the data stored in┬áRAM(Random Access Memory) can be called as volatile memory. It is also called the primary memory. So, why do we need to analyze memory? For... Continue Reading →

Powered by WordPress.com.

Up ↑

Create your website at WordPress.com
Get started