TISC 2026 by CSIT wrapped last week. Five finals challenges, five completely different rabbit holes.

Favourite was a hardware one. Spent hours convinced my approach was broken. Quick chat with an organiser revealed the truth: NO ONE HOLDS THE ADMIN DEVICE. It was on a pole up front. I was pressing my button every time a different organiser walked past my desk like an NPC. Walked over, pressed it, boom, solved.

Sometimes the bug is not in your code. It is in your assumptions about the room.

#TISC2026 #Cybersecurity #SGCyber #CSIT #CTF #DEFCON #InfoSec #DEFCONSG #TISC #EthicalHacking

Reflecting on Day 1 of the HTX CTF Finals here in Singapore.

I didn't win, but the technical takeaway was clear: Precision is a force multiplier.

By focusing on a high hit rate rather than just speed, I held 5th place for a good portion of the day. It’s a great reminder that in our field, being precise is a technical skill in itself.

Looking forward to the Day 2 challenges tomorrow!

#CTF #Cybersecurity #AISecurity #IoTSecurity #DEFCON #HTXsg #DEFCONSG #EthicalHacking #CaptureTheFlag #PublicSafety #HTXctf

Qualified for TISC CTF 2026 🎉 DEF CON Singapore finals next week 🇸🇬

The last 2 challenges were brutal. I kept reminding myself there was still time and still angles I hadn't tried. Pushed through - and captured that 4th flag just hours before the clock ran out 🍀

Five domains: cryptography, binary exploitation, signal analysis, protocol parsing, reverse engineering. Brilliantly designed 🍪

Built everything I needed from the community - writeups, tutorials, Reddit and Discord. That shared knowledge is everything 🙏

Every challenge has a solution. Keep going 🔥

#CyberSecurity #CTF #DEFCON #InfoSec #DEFCONSG #TISC #EthicalHacking

Qualified for HTX CTF Finals at DEF CON Singapore 🇸🇬 - 13th in the online round, 65/74 solved. 🔥

Both tracks were AI Security and IoT Exploitation. Neither is my daily work. Meant learning how prompt-driven systems break, how MQTT/CoAP expose attack surface, and how one forgotten device pivots into everything else.

All under the clock. ⏱️ Finals end of April. 💪

#CTF #Infosec #AISecurity #IoTSecurity #DEFCON #HTXsg #DEFCONSG #EthicalHacking #CaptureTheFlag #PublicSafety

Received a heads-up that my GovTech Injection badge is expiring soon - a good reminder to share this before it does!

This badge was issued for successfully identifying an Injection vulnerability in a Singapore Government bug bounty program. Shoutout to @govtechsg GovTech Singapore for going the extra mile with a custom badge collection for contributors - it's a thoughtful gesture that makes the recognition feel more personal than just an email acknowledgement. 😊

Glad to have contributed to securing Singapore's digital infrastructure, even in a small way. 💪

https://www.credly.com/badges/2bdfefed-ecb7-4e37-afd3-5c553ae88d3f

#BugBounty #EthicalHacking #CyberSecurity #GBBP

👋 Here's a quick infographic that sums up my Hack The Box - Redeemer walkthrough (Redis enumeration).

👉 Watch the full step-by-step video: https://youtu.be/81JN1vy1HGY

#HackTheBox #Redis #EthicalHacking #CyberSecurity #PenTesting #CTF #Infosec #htb

👋 Here's a quick infographic that sums up my Hack The Box - Dancing walkthrough (SMB enumeration).

👉 Watch the full step-by-step video: https://youtu.be/CpaBWeq9JU8

#HackTheBox #SMB #EthicalHacking #CyberSecurity #PenTesting #CTF #Infosec #htb

New HTB walkthrough: REDEEMER (Tier 0) - Redis fundamentals for beginners.

Redis is everywhere! Caching, session stores, job queues – and when it is exposed or misconfigured, it can leak sensitive data. I just published a beginner-focused walkthrough that covers:

🔹 How sensitive data can be stored directly in memory
🔹 What Redis is and common use cases
🔹 Why you shouldn't expose Redis without authentication
🔹 How to identify Redis with Nmap (port 6379)
🔹 How to connect with "redis-cli", enumerate keys and databases
🔹 Why "KEYS *" is fine for CTFs but use "SCAN" in production

This is part of my ongoing Hack The Box Starting Point – Step-by-Step Walkthrough for Beginners series, where the goal is to help newcomers build strong fundamentals in ethical hacking.

🎥 Watch the HTB Redeemer walkthrough here:

▶ https://www.youtube.com/watch?v=81JN1vy1HGY

📂 Full playlist:

▶ https://www.youtube.com/playlist?list=PL2mncq0mb-6iZ6ngDmwGEywmxnCYwO2s_

If you are transitioning into cybersecurity, bug bounty, or pentesting - this series is built for you.

Happy learning and keep hacking ethically 🔐

#CyberSecurity #EthicalHacking #HackTheBox #PenetrationTesting #Learning #TechEducation #BeginnerHacking #HTBStartingPoint #Nmap #KaliLinux #redis

💡 Understanding core network protocols is fundamental for any aspiring cyber security professional. One of the most common that you will encounter is SMB (Server Message Block).

In my latest video, I provide a detailed, beginner friendly walkthrough of the "DANCING" machine from Hack The Box, focusing entirely on SMB enumeration and access 🚀

You will learn:
🔹 What SMB (Server Message Block) is and how it works
🔹 Common SMB ports (139 & 445) and why they matter
🔹 How to use Nmap for targeted service enumeration such as SMB services
🔹 How to enumerate SMB shares using smbclient
🔹 Understanding anonymous / misconfigured shares
🔹 Downloading files from SMB shares and capturing the flag

This is a perfect starting point for anyone new to ethical hacking.

🎥 Watch the HTB DANCING walkthrough here:

https://www.youtube.com/watch?v=CpaBWeq9JU8

📂 Full playlist:

https://www.youtube.com/playlist?list=PL2mncq0mb-6iZ6ngDmwGEywmxnCYwO2s_

If you are transitioning into cybersecurity, bug bounty, or pentesting - this series is built for you.

Happy learning and keep hacking ethically 🔐

#CyberSecurity #EthicalHacking #HackTheBox #PenetrationTesting #Learning #TechEducation #BeginnerHacking #HTBStartingPoint #Nmap #KaliLinux #SMB

Just published a new beginner-friendly walkthrough for Hack The Box Starting Point - FAWN (Tier 0).

This machine is an excellent introduction to FTP (File Transfer Protocol) and helps beginners understand:
🔹 How FTP works
🔹 Why FTP is insecure by design
🔹 What are the secure alternatives of FTP
🔹 How attackers enumerate services using Nmap
🔹 How anonymous FTP login works
🔹 What is the man command
🔹 How to retrieve files and capture the flag

Instead of rushing through commands, this walkthrough explains the concepts behind every step, which is something I wish I had when I first started learning ethical hacking.

If you are new to penetration testing or is an aspiring ethical hacker, Hack The Box Starting Point is a fantastic learning platform.

🎥 Watch the FAWN walkthrough here:

https://www.youtube.com/watch?v=SLFJOEq5w6Y

📂 Full playlist:

https://www.youtube.com/watch?v=OqxPRwP8t_s&list=PL2mncq0mb-6iZ6ngDmwGEywmxnCYwO2s_

If you are transitioning into cybersecurity, bug bounty, or pentesting - this series is built for you.

Happy learning and keep hacking ethically 🔐

#CyberSecurity #EthicalHacking #HackTheBox #PenetrationTesting #Learning #TechEducation #BeginnerHacking #HTBStartingPoint #Nmap #KaliLinux #FTP