
just an average student in singapore | @NUSGreyhats @r3kapig
Singapore
Joined May 2017
- Tweets221
- Following392
- Followers650
- Likes317
I am extremely fortunate and grateful to have been selected for the NUS Student Sponsorship Program to attend the upcoming @offbyoneconf @starlabs_sg !
If you're attending the conference and would like to meet, I would love to do so!
(p.s. it's not too late to get tickets ;))
Elma retweeted
Patches for some of the bugs that @junr0n, @elma_ios and I found during SpiritCyber 2025 have finally been released!
(I just found out that the CVEs has been released too oops👀)
It was a joy working with @TPLINK and Team.
tp-link.com/us/support/faq/4…
tp-link.com/us/support/faq/4…
Elma retweeted
So sad after this year's DEF CON Quals. I think it’s finally time to retire. Competitive CTFs have turned into a painful, exhausting, and honestly boring grind. Maybe I’ll still check in occasionally, but I’m never going to stay up all night for them again
I wrote about how LLMs broke CTF competitions over on Mastodon.
vt.social/deck/@lina/1161989…
Elma retweeted
Hot take: Jeopardy style CTFs are (mostly) dead.
However I think the organisers will find will always find a way to create "new form" CTFs.
Like real hardware challenges, more a&d or koth? Or like cyber range style finals.
Let's wait and see...
Unfortunately, I didn't finish this year's Flare-On due to poor time management but I wrote a writeup on how I solved challenge 8 purely with WinDbg using Time Travel Debugging and LinQ queries.
Check it out :)
blog.elmo.sg/posts/flare-on-…
Elma retweeted
✅ #SPIRITCYBER25 has come to a successful close!
👏 Big shoutout to everyone who participated and congrats to our Top 6 teams once again - your findings have helped advanced Singapore’s cyber resilience.
1️⃣ zamny zamn zamn: @elma_ios, @sunsh1nefact0ry, @junr0n
2️⃣ NullIoT: @bytehx343 @0xakm, @mgthura404
3️⃣ Obsidian Ghost Protocol: @spaceraccoonsec, Zhong Liang, Azer
4️⃣ Peenoise: @shipcod3, @jeroldcamacho, @japzdivino
5️⃣ saltedeggchicken: @Sn0rkY, Cher Boon Sim, @nbuzydebat
6️⃣ Testalways: @testalways
Elma retweeted
🇸🇬 Big week for @yeswehack at #SICW2025! The #SPIRITCYBER25 Hackathon will see 6 elite teams competing live on 22–23 Oct to strengthen Singapore’s critical #IoT systems.
🏆 From 30+ teams which participated in the 4-week qualifiers, these top hunters have earned their spot in the finals:
🔹zamny zamn zamn: @elma_ios, @sunsh1nefact0ry, @junr0n
🔹Obsidian Ghost Protocol: @spaceraccoonsec, Zhong Liang Ou-Yang, Azer WHR
🔹Peenoise: @shipcod3, @jeroldcamacho, @japzdivino
🔹Testalways: @testalways
🔹NullIoT: @bytehx343 @0xakm, @mgthura404
🔹saltedeggchicken: @Sn0rkY, Cher Boon Sim, @nbuzydebat
Have you ever wondered what happens if we break compiler conventions? I was able to obfuscate the control flow of a program and hide code by modifying non-volatile registers to modify the behavior of library code.
blog.elmo.sg/posts/the-art-o…
I was able to come up with a proof-of-concept executable where I was able to obfuscate the program's control flow by modifying non-volatile registers such that we can modify the behavior of library code to make jumps to blocks of code that is not visible to the disassembler.
I was messing around with symbol resolution in ELF and came up with an obfuscation technique on abusing symbol resolution in ELF programs that is able to trick tools (i.e. Ghidra, IDA, GDB) into showing the wrong library function calls.
blog.elmo.sg/posts/breaking-…
This blog post does a deep-dive into how symbol resolution in ELF programs work, what are the relevant ELF metadata that is used, and how we can modify it to confuse disassemblers and decompilers on what library function it is calling.
I also wrote a CTF challenge for @r3kapig that uses this obfuscation technique where participants have to either write a debugger script or parse .rela.plt to identify and fix the function calls.
Check it out here: github.com/caprinux/challeng…










