Cybersecurity is not a hobby, it’s a responsibility.
I am a Computer Engineering student at Goce Delčev University – Štip, focused on application security, web penetration testing, network security, responsible disclosure, and security tooling.
Most days, you will find me somewhere between a Linux terminal, Burp Suite, a half-finished security tool, and another suspicious domain waiting to be reported.
I spend a significant part of my time researching vulnerabilities, analyzing web applications, studying network behavior, and building tools that make repetitive security work more efficient. I have also reported thousands of spam, scam, phishing, and malicious websites through the appropriate channels.
A vulnerability I responsibly disclosed to my faculty later became an internship opportunity at the Faculty of Informatics. That experience shaped the way I approach security research:
find the issue
understand the impact
document it clearly
report it responsibly
help improve the system
I am also part of the management team at BugHane Academy, a cybersecurity community focused on practical learning, collaboration, and responsible security research.
Two CVE identifiers have been assigned to vulnerabilities I discovered and responsibly disclosed.
Research involving an embedded network device and unauthenticated service exposure.
An Execution After Redirect vulnerability affecting access-control enforcement.
| Achievement | Details |
|---|---|
| SANS CTF | 4th place |
| Being Wise CTF | 4th place |
| University Hall of Fame | Recognition for responsible security research |
| Rual Hall of Fame | Recognition for vulnerability reporting |
| Goce Delčev University – Štip | Official recognition letter and faculty publication |
| Rahim Usta Anadolu Lisesi | Official recognition letter |
- University Hall of Fame
- Rual Hall of Fame
- SANS CTF — 4th Place
- Being Wise CTF — 4th Place
- Goce Delčev University Faculty Publication
| Area | Technologies, Tools, and Practices |
|---|---|
| Application Security | Web application testing, access-control validation, authentication testing, vulnerability verification |
| Penetration Testing | Burp Suite, OWASP ZAP, Nmap, ffuf, sqlmap, WPScan, XSStrike, Dalfox |
| Network Security | TCP/IP, Wireshark, service analysis, network enumeration, firewall concepts, ProxyChains, Netcat |
| Reconnaissance | subfinder, amass, katana, gau, waybackurls, HTTP probing, attack-surface mapping |
| Security Research | Responsible disclosure, CVE coordination, impact analysis, technical reporting |
| Development | Python, Bash, Rust, JavaScript, TypeScript, automation, CLI and desktop tooling |
| Platforms | Kali Linux, Debian, macOS, Windows, WSL, Raspberry Pi |
| Infrastructure | Git, GitHub, Vercel, Docker fundamentals, Nginx, Linux administration |
A defensive desktop application for authorized access-control and Execution After Redirect validation.
Stack: Tauri 2 · React · TypeScript · Rust · SQLite
Core areas include:
- URL and scope validation
- Redirect-safety checks
- DNS and IP pinning
- Per-scan authorization
- Audit logging
- Pause, resume, and recovery workflows
- Turkish and English localization
An OSINT-focused phishing analysis and domain monitoring tool designed to investigate suspicious infrastructure.
A security-focused script for analyzing exposed credentials and auditing email and password security.
A productivity-oriented terminal environment built around Zsh and a customized security-research workflow.
I am actively working on tools for:
- JavaScript endpoint discovery
- Subdomain reconnaissance
- Attack-surface mapping
- HTTP status and technology monitoring
- Authorized access-control validation
- Security reporting automation
A Raspberry Pi 5-based lab environment for Linux, networking, security experimentation, automation, and computer-vision projects.
Computer Engineering and Technologies
My academic focus includes computer engineering, networking, operating systems, software development, and cybersecurity.
After responsibly disclosing a security issue affecting university infrastructure, I was given the opportunity to continue my work through a faculty internship focused on authorized security testing and technical documentation.
I am part of the management team at BugHane Academy, a cybersecurity community where researchers and learners share knowledge, collaborate, and improve together.
I publish practical notes about cybersecurity, Linux, software development, security research, and the technical problems I encounter while learning.
My goal is not to turn every small problem into a forty-page guide. If something can be explained clearly in a few paragraphs, that is usually the better option.
For security research, collaboration, community work, or professional communication:
research responsibly · report clearly · keep learning