Rrathsarainrr-cyber.hashnode.dev·1d ago · 17 min readNetwork Data Hiding: Covert Channels and Traffic ManipulationConsider a packet capture from a corporate network segment: 23 DNS queries in 21 seconds. Nothing about that number is alarming; DNS is background noise on any live network. Two of those queries are w00
Rrathsarainrr-cyber.hashnode.dev·4d ago · 13 min readGNU/Linux: Where Data Hides and How It's FoundA filesystem can tell an investigator that everything is consistent while still leaving data outside the paths that ordinary tools inspect. Hidden filenames are the easy case. More interesting cases i00
Rrathsarainrr-cyber.hashnode.dev·4d ago · 15 min readWindows: Where Data Hides and How It's FoundA file called Secret.exe reports 25 bytes on disk. Nothing in Explorer, nothing in a standard dir listing, and nothing in Task Manager disagrees with that number. Run dir /r instead of dir, and the sa00
SWshreyas walakeinshreewalake.hashnode.dev·Sep 12 · 13 min readThat WhatsApp Image Might Not Be Just an ImageLet me start with something uncomfortable. Somewhere right now, someone opened a JPEG file they received on WhatsApp/social-media and didn't think twice about it. It looked like a meme. Maybe a weddi21S
Rrathsarainrr-cyber.hashnode.dev·Sep 3 · 11 min readWindows Memory Forensics: Finding a Live Infection with VolatilityPID 1484 had been running since boot. Nothing about that was unusual: it was Explorer.exe, the process every Windows machine on earth is running right now. What was unusual was the process hanging off00
SSaguninsagunwrites.hashnode.dev·Sep 1 · 7 min readWindows Registry: The Database Behind Windows ConfigurationWindows contains an enormous amount of configuration information. It needs to remember things such as: User settings Installed software Hardware configuration System settings Service configuratio00
SSaguninsagunwrites.hashnode.dev·Aug 24 · 6 min readUnix Inode Structure: How Unix Filesystems Track FilesWhen you look at a file in a Unix-like operating system, you see something simple: report.txt But the filesystem needs much more information than just the filename. It needs to know things like: How 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 23 · 6 min readBrunnerCTF 2026 : Magic or Not WriteupSummary The challenge provides four files (Brunner1.jpg, Brunner2.gif, Brunner3.png, Brunner4.bmp) that all report as generic data under file - none of them start with the magic bytes their extension 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 10 · 35 min readTryHackMe : Overflow The Jackpot writeup# Challenge Category Flag 1 B1t Recovery Crypto THM{[REDACTED]} 2 Lost Fortune Included Web THM{REDACTED} 3 Casino Heist Forensics THM{REDACTED} 4 Fresh Powder - Bonus Challenge Detection Eng10
PMPreethi Motepalliindobbylol.hashnode.dev·Aug 10 · 7 min readManagement Wants a Word- Preethi MotepalliIt was always her. It was never a bug: it was the business model. This write-up is based on my own work in an authorized TryHackMe training environment. The techniques and commands were used only agai00
