I work on security engineering. Everything I learn ends up here.
I have spent close to a decade on the offensive side: offensive AI development, web, internal network, mobile and API penetration testing, red team work and DevSecOps. Everything here is based on public vulnerability reports and experiments in my own lab — these are personal notes. Enjoy the read.
Writing
161 posts · page 4 / 14Invisible Doors: The 'Help Yourself Without Asking' Logic in the API World
Hacking has evolved from simple SQL Injections to complex logic flaws. In this post, we dive into BOLA (Broken Object Level Authorization), the sneaky vulnerability that often bypasses automated scanners and how to spot it before the bad guys do.
K8s: Conductor or Vulnerability Factory? Hidden Bombs in YAML Files
Let's talk about the 'dark side' of Kubernetes configurations. From over-privileged RBAC roles to container escapes, here is how those 'default' settings turn into a Red Teamer's playground.
The Labyrinth Inside the Code: Pulling an All-Nighter for Binary Analysis
It's 3 AM, your screen is glowing blue, and a suspicious notepad.exe is trying to exfiltrate data. Let's dive into the anatomy of a fileless malware attack and see how we can harden our defenses.
The End of Signature-Based Security: A Journey to the Heart of a File and the Art of Analysis
A deep dive into malware analysis from a Red Teamer's perspective, exploring why static and dynamic analysis are crucial for building robust defensive strategies in today's threat landscape.
Is Everyone Root in Your K8s Cluster? Let's Stop the Orchestration Chaos
A deep dive into common Kubernetes security pitfalls like wide-open API servers and over-privileged RBAC roles, and how to secure them from a Red Teamer's perspective.
The Beast Inside the Box: From Static Analysis to Behavioral Hunting
Checking hashes isn't enough anymore. Sedat dives into the 'kitchen' of malware analysis, explaining why we need to move beyond signatures to understand the character of modern threats.
It’s Not Just the Code Sweating on the Analysis Table: First Steps into the Malware World
Malware analysis is like an autopsy on a patient that is still very much alive and trying to kill you. Here is how we start tearing into the black box.
When the Valves Start Turning Themselves: The 'Air-Gap' Fairytale and Harsh Realities in Industrial Systems
Think your industrial network is truly isolated? Let's talk about the 'Air-Gap' myth, why Modbus is dangerously polite, and the cold reality of OT security from a Red Teamer's perspective.
Trusting Automated Scanners? Welcome to the Illusionary World of Mobile Security
Relying solely on automated security tools is like sailing a paper boat in a storm. Let's talk about why manual testing and defensive depth matter more than flashy PDF reports.
The Door Nobody Knows About Yet: Zero-Day Realities and the 'Patch' Race
A deep dive into the world of Zero-Day vulnerabilities, from early-career mistakes causing 4 AM kernel panics to the technical dance of memory management and the race against time.
The Calm Before the Runtime Storm: Container Escapes and Monitoring Strategies
The moment you spot `cap_sys_admin` in a privileged container, isolation is essentially dead. Let’s talk about how containers break, why the privileged flag is a disaster, and how to actually lock things down.
Not Vanilla Ice Cream, but Industrial Disaster: The Air-Gap Lie and the Defenseless World of PLCs
Think your industrial systems are safe just because they aren't on the internet? Think again. Let’s talk about the reality of OT security and how a simple Python script can wreak havoc on an unprotected PLC.