CSG @ GovTech

Glenice

STF Secret of Meow Olympurr: Creating a CTF Challenge with Cat Pictures Part 2

Write up on the Secret of Meow Olympurr challenge created for STACK the Flags 2022!

8 min readSep 5, 2023

--

STF Secret of Meow Olympurr: Creating a CTF Challenge with Cat Pictures Part 2

--

Yu Pengfei

Pwning Kubernetes

This article provides an overview of common Kubernetes attacks, and basic security best practices for kubernetes

7 min readFeb 2, 2023

--

Pwning Kubernetes

--

Darrel

Meet The Final Boss— Clearing each level of Multi-Stage Malware

In this article, we will go through several tools and techniques for malware analysis or for reverse engineering of malware.

7 min readJan 18, 2023

--

Meet The Final Boss— Clearing each level of Multi-Stage Malware

--

Glenice

TISC CloudyNekos: Creating a CTF challenge with cat pictures

By Tan Kee Hock, Glenice Tan

7 min readNov 1, 2022

--

TISC CloudyNekos: Creating a CTF challenge with cat pictures

--

Kar Wei Loh

Removing False Positives in CodeQL

This blog will focus on filtering out false positives in CodeQL results to sharpen one’s bug-hunting skills to hit the jackpot of CVEs!

8 min readApr 21, 2022

--

Removing False Positives in CodeQL

--

Chloe Ong

Hunting bugs in Accel-PPP with CodeQL

This article will discuss how to use CodeQL to find vulnerabilities in Accel-PPP and limitations encountered with CodeQL.

13 min readApr 21, 2022

--

Hunting bugs in Accel-PPP with CodeQL

--

Tan Inn Fung

Padding Oracle Hunter. A Burp Suite extension to tackle the padding oracle vulnerability

This article will introduce the padding oracle vulnerability and how the Padding Oracle Hunter) could be used to tackle the vulnerability.

10 min readApr 13, 2022

--

Padding Oracle Hunter. A Burp Suite extension to tackle the padding oracle vulnerability

--

Max chee

Uncommon office malware stagers

This article discusses the TTPs to deliver a simulated malware attack with a focus on uncommon Microsoft Office file formats

8 min readApr 4, 2022

--

Uncommon office malware stagers

--

Kang Hao

How we discovered zero-day vulnerabilities in Riverbed Software Agent

Sharing of three vulnerabilities we uncovered and how we identified the codes that allowed the vulnerabilities to occur.

13 min readMar 10, 2022

--

How we discovered zero-day vulnerabilities in Riverbed Software Agent

--

Tan Yining

Designing Better Cybersecurity Products — Part One: An Introduction to UX

(This series consists of two parts — Part One: An Introduction to UX and Part Two: Designing Complex Applications)

8 min readJan 19, 2022

--

Designing Better Cybersecurity Products — Part One: An Introduction to UX

--

CSG — cyber lead for the Singapore Government sector — keeping the Singapore Government’s ICT and Smart Systems safe and secure. Our blog is all about the techniques and technologies in cybersecurity. We post fortnightly. Till then, stay cyber safe, and cyber ready!
Connect with CSG @ GovTech
Editors
Lorraine Ong
Wong Zheng Kai
🇸🇬 | Geek | Foodie | Futurist | Polyglot | Ailurophile
Shirlynn Ong

Help
Status
About
Careers
Blog
Privacy
Terms
Text to speech
Teams