Elma

just an average student in singapore | @NUSGreyhats @r3kapig

[crazyman @crazyman823886]

So sad after this year's DEF CON Quals. I think it’s finally time to retire. Competitive CTFs have turned into a painful, exhausting, and honestly boring grind. Maybe I’ll still check in occasionally, but I’m never going to stay up all night for them again

[Renwa @RenwaX23]

"Dad, what was it like playing CTFs before AI?"

[Elma @elma_ios]

@alkalinesec will this be released (or is it already)?

[Elma @elma_ios]

@cplearns2h4ck orz

[Hoshino Lina / 星乃リナ 🩵 3D Yuri Wedding 2026!!! @Lina_Hoshino]

I wrote about how LLMs broke CTF competitions over on Mastodon.

https://t.co/QgNDeFfMPg

[pwn2ooown @pwn2ooown]

Hot take: Jeopardy style CTFs are (mostly) dead.

However I think the organisers will find will always find a way to create "new form" CTFs.

Like real hardware challenges, more a&d or koth? Or like cyber range style finals.

Let's wait and see...

[Elma @elma_ios]

@FreeFooooooood sounds pretty interesting! would that be somewhat the same as a taint analysis tool but possibly with symex built on top of it?

[Elma @elma_ios]

Unfortunately, I didn't finish this year's Flare-On due to poor time management but I wrote a writeup on how I solved challenge 8 purely with WinDbg using Time Travel Debugging and LinQ queries.

Check it out :)

https://t.co/GSxbTxNSL8

[YesWeHack ⠵ @yeswehack]

✅ #SPIRITCYBER25 has come to a successful close!  

👏 Big shoutout to everyone who participated and congrats to our Top 6 teams once again - your findings have helped advanced Singapore’s cyber resilience.
1️⃣ zamny zamn zamn: @elma_ios, @sunsh1nefact0ry, @junr0n
2️⃣ NullIoT: @bytehx343 @0xakm, @mgthura404
3️⃣ Obsidian Ghost Protocol: @spaceraccoonsec, Zhong Liang, Azer
4️⃣ Peenoise: @shipcod3, @jeroldcamacho, @japzdivino
5️⃣ saltedeggchicken: @Sn0rkY, Cher Boon Sim, @nbuzydebat 
6️⃣ Testalways: @testalways

[YesWeHack ⠵ @yeswehack]

🇸🇬 Big week for @yeswehack at #SICW2025! The #SPIRITCYBER25 Hackathon will see 6 elite teams competing live on 22–23 Oct to strengthen Singapore’s critical #IoT systems.

🏆 From 30+ teams which participated in the 4-week qualifiers, these top hunters have earned their spot in the finals:
🔹zamny zamn zamn: @elma_ios, @sunsh1nefact0ry, @junr0n
🔹Obsidian Ghost Protocol: @spaceraccoonsec, Zhong Liang Ou-Yang, Azer WHR
🔹Peenoise: @shipcod3, @jeroldcamacho, @japzdivino
🔹Testalways: @testalways
🔹NullIoT: @bytehx343 @0xakm, @mgthura404
🔹saltedeggchicken: @Sn0rkY, Cher Boon Sim, @nbuzydebat

[Elma @elma_ios]

@vxunderground made by @NUSGreyhats last week

[Elma @elma_ios]

greycats take over the world pewpew

[Elma @elma_ios]

@vxunderground 😭😭😭

[Elma @elma_ios]

Have you ever wondered what happens if we break compiler conventions? I was able to obfuscate the control flow of a program and hide code by modifying non-volatile registers to modify the behavior of library code.

https://t.co/PeWCPzcsR7

[Elma @elma_ios]

This is nothing novel or groundbreaking, but was a fun experiment to learn about what happens when we break compiler conventions and how this allows us to deter reverse-engineering efforts.

I hope that this would be a fun read for someone on this platform! :)

[Elma @elma_ios]

I was able to come up with a proof-of-concept executable where I was able to obfuscate the program's control flow by modifying non-volatile registers such that we can modify the behavior of library code to make jumps to blocks of code that is not visible to the disassembler.