I am
Sedat Özdemir — Ethical Hacker and Cybersecurity Engineer
Sr. Expert Pentest & Vulnerability Management Engineer
Ethical hacker. I think like an attacker and write down what I learn, for everyone.
Time in the field
10+
years in offensive security
2016 SOFTWARERED TEAM 2026
Areas of expertise
Offensive
- Web App Pentest
- API Security
- Red Team Ops
- Active Directory
- Mobile Pentest
- Reverse Engineering
- Offensive AI
Defense & process
- Vulnerability Management
- DevSecOps
- Container & K8s
- PCI DSS 4.0
- Malware Analysis
Recon → Exploit → Report
Curiosity + Discipline =
A closed vuln
04 / 07Exploit
Latest post
Currently
Sr. Expert Pentest & Vulnerability Management Engineer
What I'm curious about
How custom models are trained for security work, and how those models are secured themselves.
Areas of expertise
Blog topics
Technical news, fixes and code. Everything comes from my own lab or public sources.
Red Team
Kill chain, AD, C2 and evasion
7 postsPenetration Testing
Web, API, mobile and internal network
7 postsDevSecOps
CI/CD, SAST/DAST, containers and K8s
8 postsMalware Analysis
Sample analysis, IOCs and detection rules
7 postsReverse Engineering
Binaries, drivers and firmware
1 postsOffensive AI
LLM security, prompt injection, AI-assisted hunting
3 postsNews
Vulnerability news and short takes
3 postsIoT & OT
Hardware, firmware, SCADA and industrial systems
6 posts Latest writingView all
- News
PHP2Shell: the bug isn't in your app, it's in PHP itself
CVE-2026-109618 and CVE-2026-109619 open the door to unauthenticated RCE in the PHP runtime. Updating your CMS isn't enough; you need to patch the PHP binary on the server.6 min - News
Coruna reaches iOS 18: a new wave with the DarkSword chain
The Coruna exploit kit, which hit older iPhones in March, expanded in late October with a DarkSword-based chain covering iOS 18.4–18.7.2. 608 domains, one-visit compromise and Telegram data.6 min - DevSecOps
Is Container Isolation a Lie? That Thin Line Between Docker Socket and Host
If you think your containers are bulletproof shells, think again. From Docker socket abuse to risky capabilities, let's talk about how that 'sandbox' can vanish in seconds and how to actually secure it.4 min - IoT & OT
The Packet That Stops the PLC: Air-Gap Fairy Tales and Realities in the OT World
When you intercept a 'Function Code 05' request from an unauthorized IP on Wireshark, you realize within seconds that the physical valve or motor is no longer under your control. Welcome to the world of OT.4 min - DevSecOps
Small Box, Big Trouble: Let’s Stop Romanticizing Alpine Linux
Think a 5MB container image makes you unhackable? Think again. We're diving into the myths of Alpine Linux and why your container's 'diet' might be making life easier for Red Teams.4 min - DevSecOps
Armored Vehicle or Glass Jar? The Illusion of Container Isolation
Think your containers are bulletproof? Think again. Let’s dive into why shared kernels and privileged flags are a Red Teamer’s dream and how you can actually lock things down.4 min - Malware Analysis
Who’s in the Sandbox? The Labyrinths of Malware Analysis and the Eternal Game of Cat and Mouse
Signature-based detection is a relic of the past. Today's malware is context-aware and built to evade analysis. Let's dive into how we dissect these sneaky payloads without losing our minds.4 min - Red Team
Before You Double-Click That File: Becoming a 'Plague' Hunter in the Lab
A deep dive into the fundamentals of malware analysis, featuring personal stories from the field and practical tips on static and dynamic analysis without compromising your host machine.4 min
NewsView all
Latest on LinkedInFollow
Special dayOur Republic turns 103
Carousel · 9 pages01 / 09WhatsApp: someone is asking for money in your name
NewsCoruna: Google exposes an exploit kit targeting older iPhones
Press and talks
TV, radio, interviews, event talks and news coverage.
Who I amAbout
Close to a decade in offensive security. Developer first, hacker second.
Web, API, internal network and mobile penetration testing, red team work, vulnerability management and DevSecOps. I built full stack software in 12 languages, so I understand how an app breaks because I know how it's written. Everything here is my personal opinion and doesn't represent any employer.
- Years of experience
- 10+
- Technical posts
- 42
- Programming languages
- 12
Contact
Interviews, talks or a question about a post: write to me.
Press requests, conference and meetup invitations, a correction to one of my posts, or just a question. I read every message myself.
If it's an urgent vulnerability report, put "Security" in the subject.