All Writeups

Comprehensive collection of CTF challenges, solutions, and insights.

2026-03-01 Reverse Engineering Medium

DEADROP Rev 2 - Clearance Check

A multi-layer obfuscated Python script hiding its payload behind base64, marshal bytecode, and a runtime exec chain. Peel back each layer to recover the deobfuscated comparison and the flag.

rev python obfuscation marshal

2026-02-28 Reverse Engineering Hard

WHAMazon! Rev 2 - Armor

Identifying a PyArmor v9.x protected Python script, generating the correct runtime to execute it, and extracting a base64-encoded flag from the crash dump it writes to disk.

pyarmor python obfuscation deobfuscation

2026-02-28 Reverse Engineering Easy

WHAMazon! Rev 1 - Stage ?

Peeling back two layers of PowerShell obfuscation, a base64-encoded outer script and a string-split encoded flag inside, to recover the plaintext flag.

powershell obfuscation base64 deobfuscation