Operations Intel
CTF Writeups
Technical research, exploitation walkthroughs, and event retrospectives from the operatives at Capture The Chaos.
Bypassing WAFs with SQLi in HackTheBox 'BoardLight'
A deep dive into bypassing modern WAF filtering techniques to achieve time-based SQL injection and dump administrative credentials.
Read Writeup
Memory Forensics: Extracting Keys from Volatility
Analyzing a memory dump using Volatility3 to extract AES encryption keys left in RAM by a custom ransomware strain.
Read Writeup
Tracking the Threat Actor: OSINT Workflow
How we used metadata extraction, reverse image searching, and breached database cross-referencing to deanonymize a target.
Read Writeup
Reversing Custom Windows Packers
Dumping and reconstructing an executable packed with a custom x64 packer, mapping out the import table manually.
Read Writeup