Posts on defense
8 posts on defense. Notes from public sources and my own test lab.
Görünmez Duvarları Aşmak: PDF Generator'dan Cloud Metadata'ya Uzanan O Tehlikeli Yol
Bir PDF oluşturma servisinin nasıl bir iç ağ casusuna dönüştüğünü ve bulut ortamındaki en değerli anahtarların nasıl tehlikeye girdiğini teknik bir kriz anıyla inceliyoruz.
The Only Bug Even the Most Expensive Firewall Can’t Patch: The Human Factor
Ever seen a massive security budget get wiped out by a single 'free coffee' link? Let's dive into why the 'human interface' remains our most critical vulnerability and how we, as Red Teamers, look at psychological triggers.
The Shadow Creeping Behind the Walls: Anatomy of SSRF and Those 'Innocent' Looking Parameters
A deep dive into Server-Side Request Forgery (SSRF), exploring how 'innocent' URL parameters can lead to full cloud environment compromise, shared from the perspective of a Red Team Lead.
The Human Factor: Bypassing the World’s Strongest Firewall with a Cup of Coffee
While we spend millions on security infrastructure, the biggest vulnerability remains the person behind the screen. Let's talk about how social engineering exploits psychology and why it's a Red Teamer's favorite tool.
A Night in the Lab: Why That File Isn’t Behaving Like You’d Expect
Signature-based detection is a thing of the past. Join me in the lab as we dissect how modern malware hides in memory and how we can unmask these 'ghost' scripts using both static and dynamic analysis.
You Can't Patch the Human Factor: The Dirty Lab of Social Engineering
Why most phishing simulations are a waste of time and how real-world social engineering actually works—from the art of OSINT to the psychology of pretexting.
Human Vulnerability or System Failure? The Dirty Lab of Social Engineering
Forget those generic 'click for a pay raise' phishing simulations. Let's talk about how real-world social engineering works, the art of pretexting, and the silent dance of fileless payloads.
The Regret After Double-Clicking That File: Getting Lost in the Labyrinths of Malware Analysis
A deep dive into the 'wild' path of analyzing malware from a Red Teamer's perspective, starting with a personal 'bridge mode' disaster and moving into static and dynamic analysis techniques.