I work on security engineering. Everything I learn ends up here.
I have spent close to a decade on the offensive side: offensive AI development, web, internal network, mobile and API penetration testing, red team work and DevSecOps. Everything here is based on public vulnerability reports and experiments in my own lab — these are personal notes. Enjoy the read.
Writing
165 posts · page 3 / 14The Silent Cry of PLCs: The Cost of Living on 'Default' in Industrial Systems
A deep dive into the world of OT security, legacy protocols like Modbus, and why the 'air-gap' myth is the biggest threat to industrial infrastructure.
Jumping to Address 0x41414141: What Do You Do When the Patch Isn't Out Yet?
Seeing 0x41414141 in the EIP register means you're already past the 'get well soon' phase. Let's dive into the anatomy of zero-days and how to survive the gap before a patch is released.
Drowning in the Sandbox: Seeing the Unseen in Malware Analysis
Modern malware doesn't just dodge signatures anymore—it hides from the analysis environment itself. Let’s dive into how these "smart" samples detect your VM and what we can do to stay ahead.
Can Your Neighbor’s Smart Bulb Lead to Your Local Network? Pushing the Boundaries of IoT Security
Join Sedat Özdemir as he explores the 'dark alleys' of IoT security, from the dangers of Shadow IoT to unencrypted protocols like MQTT, and why your office coffee machine might be your biggest vulnerability.
A Fox in the K8s Henhouse: RBAC Vulnerabilities and the Art of Container Escape
It's 4:12 AM, and a simple customer-feedback pod is suddenly trying to list all secrets in the production cluster. Let's dive into how over-privileged service accounts and lazy RBAC configurations turn a minor entry point into a full-blown cluster takeover.
Beyond IDOR: Logic Flaws and Invisible Doors in the API World
A deep dive into BOLA (Broken Object Level Authorization) and why modern security is no longer just about firewalls, but about the logic within our endpoints.
Breaking the Factory Default: Why ‘Modern’ Security Solutions are Crashing OT Networks
Everyone is talking about IT/OT convergence, but shoving office-grade scanners into a factory network is a recipe for disaster. Here’s why your legacy PLCs hate your 'next-gen' security tools.
Ticking Time Bomb: The Zero-Day Chase and the False Security Illusion of Automated Tools
Relying on 'Enterprise' scanners to sleep soundly? We need to talk. Here's why automated tools fail against Zero-days and why logic errors are the real silent killers.
Drowning in the Sandbox: The 'Automated Analysis' Myth vs. Reality in Malware Analysis
If you're blindly trusting VirusTotal or automated sandboxes for critical systems, you're not just being lazy—you're potentially tipping off the attackers. Let's dive into why we need to get our hands dirty with manual analysis and proper OPSEC.
The Ticking Bomb You Can’t Hear: A Survival Guide for Zero-Day Chaos
In the world of cybersecurity, some threats are invisible until they strike. Let's talk about the 'dark matter' of our industry: Zero-Day vulnerabilities, and how to survive when the clock hits zero.
Smart Devices, Dumb Passwords: Infiltrating the IoT World via Firmware
A deep dive into the reality of IoT security, moving from physical UART pins to firmware reverse engineering, and why 'security by obscurity' is a myth.
What Really Happens When You Open That File? A Peek Into the Malware Analysis Kitchen
A deep dive into the world of malware analysis, from static inspection to dynamic behavioral tracking, shared through the lens of real-world experience and a few 'oops' moments.