I work on security engineering. Everything I learn ends up here.
I have spent close to a decade on the offensive side: offensive AI development, web, internal network, mobile and API penetration testing, red team work and DevSecOps. Everything here is based on public vulnerability reports and experiments in my own lab — these are personal notes. Enjoy the read.
Writing
161 posts · page 3 / 14A Fox in the K8s Henhouse: RBAC Vulnerabilities and the Art of Container Escape
It's 4:12 AM, and a simple customer-feedback pod is suddenly trying to list all secrets in the production cluster. Let's dive into how over-privileged service accounts and lazy RBAC configurations turn a minor entry point into a full-blown cluster takeover.
Beyond IDOR: Logic Flaws and Invisible Doors in the API World
A deep dive into BOLA (Broken Object Level Authorization) and why modern security is no longer just about firewalls, but about the logic within our endpoints.
Breaking the Factory Default: Why ‘Modern’ Security Solutions are Crashing OT Networks
Everyone is talking about IT/OT convergence, but shoving office-grade scanners into a factory network is a recipe for disaster. Here’s why your legacy PLCs hate your 'next-gen' security tools.
Ticking Time Bomb: The Zero-Day Chase and the False Security Illusion of Automated Tools
Relying on 'Enterprise' scanners to sleep soundly? We need to talk. Here's why automated tools fail against Zero-days and why logic errors are the real silent killers.
Drowning in the Sandbox: The 'Automated Analysis' Myth vs. Reality in Malware Analysis
If you're blindly trusting VirusTotal or automated sandboxes for critical systems, you're not just being lazy—you're potentially tipping off the attackers. Let's dive into why we need to get our hands dirty with manual analysis and proper OPSEC.
The Ticking Bomb You Can’t Hear: A Survival Guide for Zero-Day Chaos
In the world of cybersecurity, some threats are invisible until they strike. Let's talk about the 'dark matter' of our industry: Zero-Day vulnerabilities, and how to survive when the clock hits zero.
Smart Devices, Dumb Passwords: Infiltrating the IoT World via Firmware
A deep dive into the reality of IoT security, moving from physical UART pins to firmware reverse engineering, and why 'security by obscurity' is a myth.
What Really Happens When You Open That File? A Peek Into the Malware Analysis Kitchen
A deep dive into the world of malware analysis, from static inspection to dynamic behavioral tracking, shared through the lens of real-world experience and a few 'oops' moments.
The Silent Packet Before the Valves Close: Red Teaming Industrial Systems and the Invisible Threats
In the OT world, a single unauthenticated Modbus packet can be more devastating than a Domain Admin takeover. Let's dive into why industrial systems are still living in the security dark ages and how we can protect them.
Not a Time Bomb, but a Ghostly Shadow: The Reality of Zero-Days and the Night We Wait for the Patch
A deep dive into the reality of Zero-Day vulnerabilities from a Red Teamer's perspective—why waiting for a patch is no longer a luxury and how we handle those hidden tunnels in our systems.
Görünmez Duvarları Aşmak: PDF Generator'dan Cloud Metadata'ya Uzanan O Tehlikeli Yol
Bir PDF oluşturma servisinin nasıl bir iç ağ casusuna dönüştüğünü ve bulut ortamındaki en değerli anahtarların nasıl tehlikeye girdiğini teknik bir kriz anıyla inceliyoruz.
Smart Homes, Stupid Mistakes: Leaving the Backdoor Open in the IoT World
Think a tiny smart plug is harmless? From 'admin:admin' nightmares to unencrypted MQTT traffic, let's explore why IoT is the 'Wild West' of cybersecurity and how we can secure these chatty devices.