I work on security engineering. Everything I learn ends up here.
I have spent close to a decade on the offensive side: offensive AI development, web, internal network, mobile and API penetration testing, red team work and DevSecOps. Everything here is based on public vulnerability reports and experiments in my own lab — these are personal notes. Enjoy the read.
Writing
161 posts · page 2 / 14Invisible Danger: The Ghost in the Images and AI Agents
A deep dive into how 'Ghostcommit' turns simple image uploads into sophisticated prompt injection attacks against AI-driven DevSecOps workflows.
Driver as a Weapon: How BYOVD Reaches Into the Kernel
BYOVD isn't new — but it's still punching holes through EDRs. Here's what attackers do, and what defenders actually need to fix.
Saatli Bombayı Duymak: Zero-Day Gerçeği ve Savunmanın Görünmez Cephesi
Yazılım dünyasının en büyük kabusu: Sıfırıncı gün. Peki, daha kimsenin bilmediği bir açığa karşı nasıl savunma yapılır? Gelin, bilinmeyenin peşine düşelim.
A Stowaway on the Container Ship: Hidden Dangers Behind Images and Safe Harbors
We used to brag about uptime records; now we get suspicious if a container lives longer than five minutes. Let's dive into why 'it’s dockerized' doesn't mean 'it's secure' and how to stop hidden threats in your image layers.
Think Twice Before Opening That File: A Peek into the Kitchen of Malware Analysis
My journey from a 'zombie' computer to a Red Team Lead taught me one thing: malware analysis is as much about discipline as it is about art. Here's how we dissect those suspicious files safely.
Seeing Behind the Mask: A Late-Night Shift in the Analysis Lab
Signature-based detection is no longer enough. Let's dive into the 'kitchen' of malware analysis to see how we unmask modern, fileless threats using static and dynamic techniques.
Don't Underestimate __proto__: You Might Lose the Whole Kingdom
How a 'sneaky' JSON key turned a 3 AM incident response into a deep dive into Prototype Pollution and its path to Remote Code Execution.
The Silent Cry of Parameters: Hunting Logic and Architecture in Modern Web Apps
When you multiply the 'amount' parameter in a checkout request by -1 and the server returns a 200 OK, your entire security architecture just became a paper tiger. Let's dive into why logic and architecture hunting is the real frontier of modern security.
The Silent Cry of PLCs: The Cost of Living on 'Default' in Industrial Systems
A deep dive into the world of OT security, legacy protocols like Modbus, and why the 'air-gap' myth is the biggest threat to industrial infrastructure.
Jumping to Address 0x41414141: What Do You Do When the Patch Isn't Out Yet?
Seeing 0x41414141 in the EIP register means you're already past the 'get well soon' phase. Let's dive into the anatomy of zero-days and how to survive the gap before a patch is released.
Drowning in the Sandbox: Seeing the Unseen in Malware Analysis
Modern malware doesn't just dodge signatures anymore—it hides from the analysis environment itself. Let’s dive into how these "smart" samples detect your VM and what we can do to stay ahead.
Can Your Neighbor’s Smart Bulb Lead to Your Local Network? Pushing the Boundaries of IoT Security
Join Sedat Özdemir as he explores the 'dark alleys' of IoT security, from the dangers of Shadow IoT to unencrypted protocols like MQTT, and why your office coffee machine might be your biggest vulnerability.