CASE404LOCAL FORENSICS NODE

LOCAL-FIRST · EVIDENCE-AWARE · MANIFEST-VERIFIED

Interrogate the bytes.
Reconstruct the truth.

A browser-native CTF investigation deck for identifying disguised files, carving hidden payloads, chaining decoders, preserving evidence provenance, and proving the final flag.

Press Ctrl + K for the command deck

Offline processing Zero uploads Read-only analysis

NODEV01d_404

MODESAFE / LOCAL

STATUSLISTENING

01 mounting browser sandbox...

02 magic-byte engine online

03 provenance ledger armed

04 awaiting artifact signal_

⇧

Drop an artifact to begin

Images, archives, executables, documents, captures, audio, and text up to 50 MB.

Use only authorized CTF or educational artifacts.

ACTIVE OPERATOR @V01d_404 Packet Scout

Investigation XP0 XP

250 XP until Signal Hunter

01 05 03 ✓

NEXT BEST MOVE Load an artifact and establish identity.

Detected format — —

File size — —

Entropy — Waiting for analysis

Evidence 0 No evidence recorded

Progress 0 / 4 Investigation not started

ARTIFACT ANALYSIS

No artifact selected

Unknown Read-only

Filename—

Browser MIME—

Detected format—

File size—

Printable ratio—

Artifact rolePrimary artifact

SHA-256

—

INITIAL ASSESSMENT

Upload an artifact to begin analysis.

No metadata has been extracted yet.

No strings extracted yet.

No hex preview available.

Block size—

Peak entropy—

Dominant byte—

Null-byte ratio—

No embedded signatures have been scanned yet.

No archive region has been detected.

No findings yet.

No evidence recorded yet.

DECODER WORKBENCH

Transform suspicious data

Operation

Input

Decoded output will appear here.

No decoder steps recorded.

FLAG VERIFICATION

Submit recovered flag

Unverified practice

Recovered flag

A candidate is not considered correct until a challenge manifest verifies its SHA-256.

Discovered candidates 0

No flag candidates discovered yet.

COMMAND GUIDE

Understand the terminal

Choose a command

Select a command to see what it does, why it helps, and its risk level.

INVESTIGATION NOTES

Your reasoning

Not saved

ACTION REPLAY

What happened

No actions recorded yet.

Interrogate the bytes.
Reconstruct the truth.

Drop an artifact to begin

No artifact selected

Transform suspicious data

Submit recovered flag

Understand the terminal

Your reasoning

What happened

System integrity check

Caseboard // live provenance map

Move fast through the lab

Interrogate the bytes.Reconstruct the truth.

Drop an artifact to begin

No artifact selected

Entropy and byte-density map

Transform suspicious data

Submit recovered flag

Understand the terminal

Your reasoning

What happened

Interrogate the bytes.
Reconstruct the truth.