CTF Write-ups 25
- Incident Response Report: JetBrains TeamCity — Auth Bypass, Web Shell & Credential Tampering
- Incident Response Report: LFI Escalation — From Directory Traversal to Full System Compromise
- Incident Response Report: RediShell — From Jenkins RCE to Container Escape & Kinsing Miner
- Threat Intelligence Analysis: Lespion — OSINT Investigation of an Insider Threat
- Threat Intelligence Analysis: Yellow RAT — Hunting the Jupyter / Yellow Cockatoo Infostealer
- Incident Response Report: PoisonedCredentials — LLMNR/NBT-NS Poisoning & SMB Relay
- Incident Investigation Report: Poisoned PyTorch — Supply-Chain Compromise to Lynx Ransomware
- Incident Investigation Report: XLMRat — Tracing a Multi-Stage AsyncRAT Delivery Chain
- Incident Investigation Report: GrabThePhisher — Dismantling a DeFi Phishing Kit
- Incident Response Report: Maranhão — Trojanized Game Mod to Node.js Infostealer
- Threat Intel Report: RaaS Unfold — RansomHub, The Ransomware Empire Built on Abandoned Affiliates
- Threat Intel Report: Red Stealer (RedLine) — Unmasking a Commodity Credential Harvester via VirusTotal, MalwareBazaar & ThreatFox
- Threat Intel Report: Oski / Stealc Stealer — Analyzing a Credential-Stealing Trojan via ANY.RUN & VirusTotal
- Malware Analysis Report: XWorm RAT — Static & Dynamic Analysis of an Obfuscated .NET Remote Access Trojan
- Incident Response Report: IIS Server Compromise & AgentTesla Infection
- Incident Response Report: Amadey Trojan (APT-C-36) — Memory Forensics & Malware Loader Analysis
- Incident Response Report: XXE Infiltration — XML External Entity Injection, Credential Theft & Web Shell Deployment
- Incident Response Report: Tomcat Takeover — Directory Brute-Force, Credential Cracking & Reverse Shell Persistence
- Incident Response Report: RetailBreach — Stored XSS, Session Hijacking & Path Traversal on ShopSphere
- Incident Response Report: Web Investigation — SQL Injection, Credential Theft & Web Shell Deployment
- Incident Response Report: WebStrike — Server Compromise & Network Forensics Investigation
- Threat Intelligence Analysis: PhishStrike — Email Phishing & Multi-Stage Malware Investigation
- Incident Investigation Report: Operation 'BRabbit' — Bad Rabbit Ransomware Threat Intelligence
- Forensic Investigation Report: Operation 'Hammered' — Linux Log Analysis
- Forensic Investigation Report: Operation 'Reveal' — Memory Analysis