Skip to content
ctfpal
Writeup index

Forensics challenges

Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.

1,758 in the index. The 200 below are ranked by how many independent published solutions exist - which is the right order for learning, not for difficulty. A challenge with nine writeups gives you nine explanations of the same technique to compare; a harder one nobody documented gives you none.

Looking for a specific event? Browse all events.