I break enterprise infrastructure for a living. Between engagements, I'm building something that will change how offensive security scales. Cybersecurity Consultant & HackerOne bug bounty hunter

• Smart Deepfake Detection System – Python, CNN, TensorFlow
  TÜBİTAK–Supported Deepfake Detection Graduation Project focused on detecting manipulated facial videos using deep learning and image processing.

• OWASP Top 10 Educational Web Security Site – HTML, CSS, JavaScript, PHP
  Small training website that demonstrates common web vulnerabilities and basic secure coding ideas. Repo: SnowNoVA

• Malware Sandbox Simulator (Educational) – C#, .NET, WinForms
  Windows desktop app that simulates how common malware families behave on an endpoint (ransomware, infostealers, keyloggers, fileless attacks, wipers) in a safe, in-memory way, with behaviour mapped to MITRE ATT&CK techniques for learning and practice.
  Repo: MalwareSandboxSimulator

• HexTriage (AI-Powered Malware Triage) – Python, YARA, PE Analysis, LightGBM (EMBER2024)
  Static-only malware triage for PE files: extracts PE metadata/features, runs YARA + weighted heuristics, and adds ML risk scoring. Generates clean JSON/HTML reports with clear evidence and dual-use (LOLBin) awareness. Repo: HexTriage

• Offensive: Burp Suite · Metasploit · Impacket · BloodHound · CrackMapExec · Netexec
• Languages: Python, C#, Java, JavaScript, C++
• AI & Deep Learning: CNNs, Transfer Learning, TensorFlow, Image Processing
• Platform: Git, Linux (Kali, Ubuntu), Windows

Not everything I build ends up here. Most of the interesting stuff doesn't.