KNKhôi Nguyễn Đăngindangkhoi.me·Feb 27 · 3 min readWannaGame Championship 2025-WriteupHide and Seek – Forensic Investigation Report The victim reported that after browsing and downloading some files, suspicious processes began appearing on the system. Our objective is to reconstruct th00
KNKhôi Nguyễn Đăngindangkhoi.me·Feb 23 · 8 min readChaining LFI to RCE – HackTheBoxProblem This lab is from HackTheBox. The objective is to achieve Remote Code Execution (RCE) and retrieve the flag located in the root directory. The web application is quite simple. It contains three00
KNKhôi Nguyễn Đăngindangkhoi.me·Jan 6 · 3 min readA problem in DreamHackUnderstanding IP Trust and the Dangers of X-Forwarded-For While practicing some web challenges on DreamHack, I came across a beginner-level challenge called whoami – Level 1.Although the difficulty is00
KNKhôi Nguyễn Đăngindangkhoi.me·Dec 24, 2025 · 5 min readHow I Failed My First Cybersecurity CertificationI used to think the ISC2 CC was just a “lightweight” theory-based certification. Three days of revision should have been enough. While struggling with some CTF challenges, I started to feel a bit burned out. I scrolled through LinkedIn and saw peopl...00
KNKhôi Nguyễn Đăngindangkhoi.me·Dec 21, 2025 · 1 min readA problem forensic in CSCV2025DNSEXFILL Summary problem : I have a PCAP file which contain many DNS capture and two logs file I used the strings command on the PCAP file and noticed many common website here :+1: As I continue scrolling , I found some suspicious strings :+1: Pre...01R
