▓ ABOUT
Duanmu Chuanjie — security researcher, CTF player, and student based in Singapore. I build things, break things (with permission), and occasionally publish findings.
Education
River Valley High School · graduated Oct 2025
- Coursework: H2 Physics, Geography, Economics, Mathematics; H1 Chinese, GP, PW
- RVHS Colours Award for Co-curricular Excellence
Skills
- Programming: Python, Ruby, C/C++, Assembly, SageMath, LaTeX
- Cybersecurity: Vulnerability Research (fuzzing, reversing), Penetration Testing, CTF
- Tools: Radare2, Ghidra, IDA Pro, WinDbg, Kali Linux, CAD, KLayout, 3D Printing (Resin/FDM)
- Laboratory: Optical Lithography, Semiconductor Design/Testing, Microscopy
- Languages: English, Mandarin Chinese, German (A1)
▓ WORK
Digital Intelligence Service, Psychological Defence Group
Production Media Tech · Jun 2026 – Apr 2028
- Full-time national service, occasionally working on classified projects.
zcloak network .ltd
Intern, Full-Stack Development & AI Security Research · Jan 2026 – Apr 2026
- Shipped full-stack features for internal products: frontend UI, backend APIs/services, database integration.
- Researched LLM security (prompt injection, model risk analysis) and evaluated mitigations for practical deployments.
Charms and Links
Tech support & site creator · Nov 2024 – Present · charmsandlinks.com
- E-commerce site for handmade jewellery.
- Built with Ruby on Rails + TailwindCSS.
▓ RESEARCH
ScryonLabs
Cofounder, Cybersecurity Research Lab · Apr 2026 – Present
- Built madelin, an artifact-driven Linux kernel fuzzing framework for converting static UAF candidates into guided syzkaller validation runs.
- Identified and responsibly disclosed a vulnerability currently pending CVE publication.
- Reported vulnerabilities across web engines and runtimes — QuickJS-NG, tixiki.js, Ladybird Browser.
- Reported a high-severity vulnerability in Bun, the JavaScript runtime, to its maintainers.
Google Vulnerability Reward Program
Independent Security Researcher · 2026 – Present
- Active participant in Google's VRP, with vulnerability submissions targeting Google Cloud.
NTU SpiNlabs — Spin & Nanostructures Lab
Student Researcher · Nanyang Research Programme · Mar 2024 – Jan 2025
- Designed and fabricated 130+ micron-scale spintronic devices via optical lithography.
- Wrote a fabrication optimisation paper.
- Co-authored a paper validating a 2022 lab simulation on domain wall pinning.
NTU — Machine Learning for Maritime Safety
Student Researcher · Nanyang Research Programme · Sep 2024 – Jan 2025
- Co-authored a paper on container-ship risk prediction using XGBoost (R² = 0.60).
- Built PSC data pipelines (cleaning, feature engineering, preprocessing) using PyTorch, NumPy, TensorFlow.
▓ CTF & CRYPTO
Brainhack CDDC 2026
2nd Overall
Cyber Defenders Discovery Camp
TISC 2025
15th / 1515
Level 9 · CSIT
GREYCTF 2025
12th
NUS / Grey Hats
ICO 2025
Silver
Int'l rank 34 · National Gold, rank 8
Other CTF results
- GryphonsCTF 2024 · 2nd
- BlahajCTF 2025 · 5th
- Lag and Crash CTF 2025 · 6th
- YBNCTF 2025 · 3rd
- Whitehacks 2025 · 9th
Cryptography & teaching
- Head, Cryptography Interest Group — RVHS Mathematics Leaders Academy (Sep 2024 – May 2025). Researched and taught lessons on asymmetric cryptography (RSA, ECC) with problem sets.
- Vice-President, RVHS Infocomm Club (RVCTF) — May 2024 – May 2025. Developed and delivered a cybersecurity curriculum with hands-on challenges; built the club website and vulnerable-by-design training apps.
- Profile: cryptohack.org/user/poppet_t
Selective programmes
- CSA Singapore Cyber Olympians Programme — national cyber team trainee for Singapore.
- CSIT Youth Talent Programme — Windows Kernel Vulnerability Research & Pentest.
- DSO YDSP World of Science (AI).
▓ BLOG
▓ CONTACT
— best reached by email.
