Penetration Tester · Security Researcher
Breaking assumptions, understanding systems, and turning findings into actionable security improvements.
I specialize in offensive security assessments across web, mobile, API, internal/external infrastructure, and wireless environments. My work spans vulnerability discovery, exploit development, and clear reporting aligned with BDDK, SPK, and PCI DSS requirements.
Beyond application security, I explore binary exploitation with IDA, Ghidra, and GDB, with a particular interest in use-after-free and buffer overflow vulnerabilities. I am currently researching AI-assisted offensive tooling and MCP-based automation for Red Team operations.
| Area | What I work on |
|---|---|
| Application Security | Web, API, and mobile penetration testing |
| Infrastructure | Internal and external assessments |
| Vulnerability Research | Discovery, validation, and exploit development |
| Binary Security | Reverse engineering and memory corruption research |
| Offensive Automation | AI-assisted tooling and MCP-based workflows |
- CVE-2025-4040 — authorization bypass and privilege escalation
- CVE-2026-24010 — authenticated file upload abuse
- CVE-2026-24034 — cross-site scripting through unsafe profile uploads
- Arçelik Global Vulnerability Disclosure Hall of Fame
A high-efficiency CLI for parsing and analyzing Nessus vulnerability scan exports, built to make large findings sets easier to triage by severity.
Official profile: aksuburak.com · Handle: 0xd3vnull