oxygen

This page contains idekCTF 2025 writeups, covering SOC intern tasking in the misc category.

This page contains WWCTF 2025 writeups, covering Silver Moon in the forensics category.

This page contains L3akCTF 2025 writeups, covering Ghost In The Dark and BOMbardino crocodile challenges in the forensics category.

This page contains Cyber Apocalypse 2025 CTF writeups, covering all challenges in the forensics category.

The writeup analyzes Lobster Stealer, a macOS malware that steals sensitive data like passwords, browser history, and cryptocurrency wallet info. It uses RC4 for command obfuscation and AES-128-CBC for encrypting flag. The challenge involves decrypting the flag by analyzing the malicious OSA script and extracting encryption keys from a PNG file.