https://eve-maina.github.io/Sharing cybersecurity knowledge through CTF write-ups, technical blogs, and creative projects. 2025-12-10T22:10:17+00:00 Eve Maina https://eve-maina.github.io/ Jekyll © 2025 Eve Maina /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png 2025-12-10T00:00:00+00:00 2025-12-10T21:59:51+00:00 https://eve-maina.github.io/posts/P3RF3CTR00TCTF-2025-Web-Writeup/ Eve Maina

This write-up details the process of identifying and exploiting a Server-Side Request Forgery (SSRF) vulnerability to gain administrative access and retrieve the flag. The challenge provided us with this zip file . We were provided with this landing page on visiting the site: Step 1: Reconnaissance:The Code Review (Hunting for Bugs) The first thing I did was crack open the provided sour...

2025-11-07T00:00:00+00:00 2025-11-08T00:19:33+00:00 https://eve-maina.github.io/posts/AUTO-SCALING-IN-AWS/ Eve Maina

Project Overview In this project, I use the AWS Command Line Interface (CLI) to launch an Amazon EC2 instance that hosts a web server and create an Amazon Machine Image (AMI) from it. The AMI then serves as the foundation for deploying a system that automatically scales under variable workloads through Amazon EC2 Auto Scaling. To ensure high availability and efficient traffic distribution, I a...

2025-10-31T00:00:00+00:00 2025-10-31T00:00:00+00:00 https://eve-maina.github.io/posts/247-CTF-ICMP-Tunneling/ Eve Maina

This write-up covers extracting a hidden flag from ICMP traffic — a hands-on look at ICMP tunneling / data exfiltration, showing protocol discovery, payload extraction & reassembly, file carving of the embedded image, and practical defenses to detect and mitigate such attacks. Provided is the following pcap file to analyse. The first thing I did was get a feel for the capture and confirm...

2025-10-12T00:00:00+00:00 2025-11-07T23:49:56+00:00 https://eve-maina.github.io/posts/I&M-BANK-2025-CTF-Network-Forensics-Writeup/ Eve Maina

Catch if you can We were given this pcap file analyze. Given this pcap file, the first thing I did was apply the filter frame contains “flag” to check if any packets contained references to a flag. Two packets appeared, each with a GET request—one for flag.txt and the other for flaggy.txt. This looked like the right place to find the flag, so I followed each stream. I started with flag.tx...

2025-10-07T00:00:00+00:00 2025-11-07T23:49:56+00:00 https://eve-maina.github.io/posts/I&M-BANK-2025-CTF-Incident-Responce-Writeup/ Eve Maina

Compromised server-1 We were given this pcap file analyze. Given such a challenge, the first thing I did was to identify the attacker’s IP address. This helps in getting a better understanding of the traffic flow. To achieve this, I used wireshark - a packet analysis tool. After opening the pcap file on wireshark, Under Statistics >Conversations> IPv4 , I sorted the packets in descend...