// tags
_network-forensics
1 article
Apr 17 2026 5 min read
7 - The Mole: Reconstructing an Android Malware Beacon from a PCAP
A packet-capture-driven reverse engineering walk through an Android malware dropper, its SID-based gating logic, and the token chain used to reach the final flag.
android malware network-forensics reverse ctf