All Writeups

Comprehensive collection of CTF challenges, solutions, and insights.

2026-08-17 Forensics medium

Raptor Weekly 13 - Night Traffic

Night Traffic: layer-2 MITM in a noisy office capture; flag is XOR-encrypted under a SHA-256 of the attackers identity chain. Flag recovered.

exfil forensics pcap arp-spoofing

2026-03-01 Forensics Insane

DEADROP Forensics 6 - NIGHTJAR AFTERMATH

A ZIP containing six post-incident artifacts, logs, a photo, a config, a README, a binary, and a pcap. Each hides one fragment of the flag using a different technique. The README encodes the final fragment via trailing-space whitespace steganography across 47 lines.

forensics multi-artifact steganography whitespace