Girls-in-CTF Writeup - Forensics & AI

Introduction To encourage and celebrate women/girls in cyber security, Re:Hack has organized this girls-only-CTF. As a woman, I really appreciate this effort and it feels incredibly inspiring. This is the first time that myself see so many girls and women gather in one place and all are incredibly passionate about this very technical field. So, I would like to give a very special thank-you to the organizers and all the challenge writers involved to make this sort of event possible. ...

September 18, 2025

ScriptCTF Writeup - Forensics

pdf (Author: Connor Chang) Description: so sad cause no flag in pdf The challenge attachment can be found here: https://github.com/scriptCTF/scriptCTF2025-OfficialWriteups/blob/main/Forensics/pdf/attachments/challenge.pdf For this challenge, you can open up Firefox to view the hint in the given PDF, but for this approach, we won’t need to use it. All we have to do is using binwalk binwalk -e challenge.pdf In the extracted folder, click on (or cat) the text file (11B or something similar), the flag is in there ...

September 12, 2025

How did I repair an (Arch) Linux bootloader twice

Introduction: Updating BIOS, got Linux overwritten After I updated my BIOS, it happened to auto turn on secure boot, bitlocker again and overwrite the bootloader on my Linux partition on a separated disk. Not to mention, I no longer see my systemd bootloader screen. Disable bitlocker key To disable bitlocker key (not decrypt the whole drive), so the windows partition won’t ask you bitlocker password over and over again when you dual-boot: ...

September 11, 2025

Recover corrupted USB in Linux terminal (required complete data wipe)

Step 1 lsblk The USB would likely to be something like sda or sdb (the same name with number is a partition). The easiest way to figure out which is your thumb drive is the size. Step 2 If the system mount any of your partition, you need to unmount them first before wiping. # Replace sdX1 with your actual partition identifier (e.g., sdb1) sudo umount /dev/sdX1 Step 3 Use wipefs command to completely erase all partition tables and filesystem signatures from the drive. ...

September 11, 2025

Revive FlareVM Network Connection (VirtualBox)

Introduction Normally, installing a FlareVM won’t mutate your network connection. However, for some reason, I wasn’t able to access network inside the VM. This could have caused by one or a couple of reasons: Non-fatal errors occured during installation (I was supposed to look at the screen during all process, but it took 6h to finish…) The recovery function of Windows got forced shut down to fulfill installation prerequisites, so it can not intervene and autofix the network issues A driver “Other” was spotted to be missing after FlareVM completely finish its installation VirtualBox network setting walkthrough You may like to switch to either NAT or Bridged Adapter. In the Adapter type, choose something along the line of “Intel… Desktop”, or if you don’t know what to choose, just leave the default option. ...

September 11, 2025

Merging multiple singular .ics files into one in Linux

Step 1: Gather your individual .ics files in a folder. Open the terminal in the said folder. Type this in your console. # Comhbine all .ics to a new text file cat *.ics > temp.txt Step 2: If you check with cat temp.txt you can see there is this weird string that you need to get rid off: END:VCALENDARBEGIN:VCALENDAR. Use cat temp.txt | grep -v DARBEG > temp1.txt Step 3: For my case, I also need to: ...

September 3, 2025