pentest-ctf-forensics
Digital forensics, steganography, and packet analysis for CTF challenges and investigation.
Source facts
- Repository
- jd-opensource/JoySafeter
- Last source activity
- February 11, 2026 at 09:17
- Detected SKILL.md language
- English
- Stars
- 313
- Forks
- 57
Install options
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Review the source files
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
File Explorer
3 filesShowing SKILL.md
SKILL.md
Source instructions · Read-only preview- name
- pentest-ctf-forensics
- description
- Digital forensics, steganography, and packet analysis for CTF challenges and investigation.
# Pentest CTF Forensics
## Purpose
Extract hidden information from various artifacts: memory dumps, network captures (PCAP), images, and disk images.
## Core Workflow
1. **File Analysis**: Identify file type, metadata, and embedded strings using `file`, `exiftool`, and `strings`.
2. **Steganography**: Detect and extract hidden data in images/audio using `steghide` and `stegsolve`.
3. **Network Forensics**: Analyze PCAP files for suspicious traffic and flag transmission using `wireshark` or `tshark`.
4. **Memory Forensics**: Analyze memory dumps for processes, connections, and injected code using `volatility`.
5. **Data Extraction**: Carve files and recover deleted data using `foremost` and `binwalk`.
## References
- `references/tools.md`
- `references/workflows.md`
View on GitHub