I work on security engineering. Everything I learn ends up here.
I have spent close to a decade on the offensive side: offensive AI development, web, internal network, mobile and API penetration testing, red team work and DevSecOps. Everything here is based on public vulnerability reports and experiments in my own lab — these are personal notes. Enjoy the read.
Writing
161 posts · page 9 / 14Dumb Passwords of Smart Devices: Firmware Hunting and Shadow Protocols in the IoT World
Ever wondered why billion-dollar IoT infrastructures fail? Let's dive into firmware extraction, hidden backdoors, and the inherent risks of misconfigured MQTT protocols from a Red Teamer's perspective.
Is Your Smart Bulb Handing Over Your House Keys? The Dark Backdoors of IoT
Forget 'admin:admin' hunts on Shodan. Real IoT security threats hide deep within unpatched, messy firmware files and unencrypted protocols. Here's a look at how we analyze these devices during Red Team ops.
The Illusion of Container Isolation: Owning the Host via docker.sock
Think your containers are securely isolated? Think again. From exposed Docker sockets to unnecessary privileges, let's talk about how misconfigurations turn your secure containers into host-level backdoors.
Smart Devices or Trojan Horses in Your Home? IoT Security Needs More Than Just Shodan Tourism
Scanning for open IPs on Shodan isn't real IoT security. Join Payten's Red Team Lead, Sedat Özdemir, as he dives into firmware analysis, hardcoded backdoors, and why your smart toaster might be a bigger risk than you think.
Hitting the 'Reset' Button in the Factory: Why Red Teaming Industrial Systems Gets the Heart Racing
A deep dive into the high-stakes world of Industrial Control Systems (OT) security, featuring a 'learning-the-hard-way' story about how a simple Nmap scan can halt an entire production line.
The Silent Betrayal of the Cache: Web Cache Poisoning via Unkeyed Headers
Ever wonder how a performance booster like Varnish or Cloudflare could be turned against your users? Let's dive into the world of unkeyed headers and see how a simple X-Forwarded-Host can lead to a full-scale JavaScript injection.
The Silent Danger Hidden Between JSON Packets: API Logic Errors and Mass Assignment
In the modern web, the real danger isn't always a complex script; sometimes it's just an extra field in a JSON packet. Let's explore Mass Assignment and how to secure your APIs.
Whose Shoulders Are You Standing On? The Supply Chain Nightmare
You trust your code, but do you trust your dependencies? A deep dive into why shifting left also means looking at the libraries you invite into your house.
Trojan Horses in Our Pockets: Mobile App Security Blunders We Swear We'd Never Make
From mistaking public API keys for crown jewels to the 'allowBackup' trap, let's dive into some common mobile security pitfalls I've seen in the field—and how to avoid them.
Human Vulnerability or System Failure? The Dirty Lab of Social Engineering
Forget those generic 'click for a pay raise' phishing simulations. Let's talk about how real-world social engineering works, the art of pretexting, and the silent dance of fileless payloads.
From Smart Bulbs to Corporate Networks: The 'Default' Disaster in IoT Security
Think that smart coffee machine in the breakroom is harmless? Think again. Let's dive into how 'default' settings and lazy engineering turn IoT devices into a Red Teamer's favorite entry point.
The Trojan in Our Pockets: The Unseen Side of Mobile Security and the 'Safe' Pitfalls
Mobile security is more than just FaceID. From hardcoded secrets in APKs to sensitive data leaking in SharedPreferences, let's dive into the defensive side of mobile app development through the eyes of a Red Teamer.