BelkaCTF 2025 challenges & writeups

BelkaCTF is a digital forensics CTF held by Belkasoft, the vendor of Evidence Center X forensic toolkit.

Unravel an investigation story by solving a series of diverse DFIR challenges. The CTF is open to both professional forensic analysts and enthusiastic amateurs.

* * *

— Damn these blue screens to hell! — The Chief sucked on his cigar so hard I thought his lungs would surrender first. — Half the country's on pause!

— Airports, hospitals, power plants… all crashed into that lovely blue abyss, — I nodded, lazily jamming a USB stick into my laptop. — Except one terminal.

— Which one?

— The dispatcher's workstation at the airport. Didn't BSOD like the rest — instead, it runs some weird locker, blasting propaganda: "Hit the streets on this date, show 'em who's boss..."

The Chief let out a dry chuckle:

— So, detective, what's your take?

— My take? This ain't some script kiddie brag. Someone's playing crowd control through hijacked Windows boxes.

He exhaled smoke slowly, eyes gleaming:

— Then it's time we find out who woke up the streets from behind a ransom screen.

— Already on autopilot, Chief. Just don’t mess with my coffee mug.