<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Forensics on </title>
    <link>https://n9o.xyz/categories/forensics/</link>
    <description>Recent content in Forensics on </description>
    <generator>Hugo -- gohugo.io</generator>
    <language>en</language>
    <copyright>© 2026 Vaishnav Baraskar</copyright>
    <lastBuildDate>Mon, 07 Feb 2022 00:00:00 +0000</lastBuildDate><atom:link href="https://n9o.xyz/categories/forensics/index.xml" rel="self" type="application/rss+xml" />
    
    <item>
      <title>Decrypting Shadows: Reversing Ransomware from CactusCon&#39;s FunWare</title>
      <link>https://n9o.xyz/capturetheflag/funware/</link>
      <pubDate>Mon, 07 Feb 2022 00:00:00 +0000</pubDate>
      
      <guid>https://n9o.xyz/capturetheflag/funware/</guid>
      <description>&lt;h1 class=&#34;relative group&#34;&gt;&lt;strong&gt;Prologue — Digging Through Bytes&lt;/strong&gt; 
    &lt;div id=&#34;prologue--digging-through-bytes&#34; class=&#34;anchor&#34;&gt;&lt;/div&gt;
    
    &lt;span
        class=&#34;absolute top-0 w-6 transition-opacity opacity-0 ltr:-left-6 rtl:-right-6 not-prose group-hover:opacity-100&#34;&gt;
        &lt;a class=&#34;group-hover:text-primary-300 dark:group-hover:text-neutral-700 !no-underline&#34; href=&#34;#prologue--digging-through-bytes&#34; aria-label=&#34;Anchor&#34;&gt;#&lt;/a&gt;
    &lt;/span&gt;        
    
&lt;/h1&gt;
&lt;p&gt;I remember that lazy afternoon. Coffee was cold. The air around me was still, except for the quiet hum of my laptop. I booted up the CactusCon 2022 CTF and saw something that immediately got my attention: &lt;strong&gt;FunWare&lt;/strong&gt;. A name oddly whimsical for what turned out to be a ransomware reversing challenge.&lt;/p&gt;</description>
      <media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://n9o.xyz/capturetheflag/funware/feature.jpg" />
    </item>
    
  </channel>
</rss>
