https://ibrahimsql.tr/posts/ai-cli-statusline-rehberi https://ibrahimsql.tr/api/og?title=AI%20CLI%20Ara%C3%A7lar%C4%B1nda%20Statusline%3A%20Tek%20Sat%C4%B1rda%20Model%2C%20Limit%20ve%20Context AI CLI Araçlarında Statusline: Tek Satırda Model, Limit ve Context Claude Code, agy, Codex ve Grok için statusline: hangi CLI hangi alanları verir, settings dosyaları, jq'li payload çıkarma ve limit hesabı. https://ibrahimsql.tr/posts/android-pentesting-checklist-en https://ibrahimsql.tr/api/og?title=Android%20Pentest%20and%20Security%20Architecture%3A%202026%20Field%20Manual%20and%20Source%20Code%20Analysis Android Pentest and Security Architecture: 2026 Field Manual and Source Code Analysis A deep architectural analysis of Android application security: Binder IPC, Keystore/Keymint TEE integration, exported components, WebView exploits, JNI/NDK analysis, and Play Integrity mechanisms under 2026 standards. https://ibrahimsql.tr/posts/android-pentesting-checklist-tr https://ibrahimsql.tr/api/og?title=Android%20Pentest%20ve%20G%C3%BCvenlik%20Mimarisi%3A%202026%20Saha%20Rehberi%20ve%20Kaynak%20Kod%20Analizi Android Pentest ve Güvenlik Mimarisi: 2026 Saha Rehberi ve Kaynak Kod Analizi Android güvenlik modeli, Binder IPC, Keystore/Keymint TEE entegrasyonu, exported bileşenler, WebView zafiyetleri, JNI/NDK analizi ve Play Integrity mekanizmalarının 2026 standartlarında derinlemesine teknik analizi. https://ibrahimsql.tr/posts/anti-debugging-noobs-en https://ibrahimsql.tr/api/og?title=Anti-Debugging%20for%20Noobs%2C%20Part%201%3A%20How%20a%20Program%20Notices%20the%20Debugger Anti-Debugging for Noobs, Part 1: How a Program Notices the Debugger First principles of anti-debugging on Linux: the one-tracer rule, ptrace self-trace, TracerPid in /proc, parent checks, timing gaps and 0xCC breakpoint scanning, plus how analysts answer each check. https://ibrahimsql.tr/posts/anti-debugging-noobs-tr https://ibrahimsql.tr/api/og?title=Yeni%20Ba%C5%9Flayanlar%20i%C3%A7in%20Anti-Debugging%2C%20B%C3%B6l%C3%BCm%201%3A%20Program%20Debugger'%C4%B1%20Nas%C4%B1l%20Fark%20Eder Yeni Başlayanlar için Anti-Debugging, Bölüm 1: Program Debugger'ı Nasıl Fark Eder Linux'ta anti-debugging'in temelleri: tek tracer kuralı, ptrace ile kendini izleme, /proc içinde TracerPid, ebeveyn kontrolü, zamanlama ölçümü ve 0xCC breakpoint taraması; artı analistlerin her kontrole verdiği yanıtlar. https://ibrahimsql.tr/posts/claude-code-co-authored-by-kaldirma https://ibrahimsql.tr/api/og?title=Claude%20Code'da%20Co-Authored-By%20%C4%B0mzas%C4%B1n%C4%B1%20Kald%C4%B1rmak Claude Code'da Co-Authored-By İmzasını Kaldırmak Claude Code'un commit ve PR'lara eklediği 'Co-Authored-By' / 'Generated with' satırlarını iki yolla kaldırmak: settings.json attribution ve commit-msg hook'u. https://ibrahimsql.tr/posts/htb-cap-writeup https://ibrahimsql.tr/api/og?title=HackTheBox%20Cap%20Writeup HackTheBox Cap Writeup HTB Starting Point Cap makinesi: /data/0 IDOR ile başka kullanıcının PCAP'i, FTP düz metin şifre, SSH şifre tekrarı ve cap_setuid ile root. https://ibrahimsql.tr/posts/htb-code-python-sandbox https://ibrahimsql.tr/api/og?title=HTB%20Code%3A%20Python%20Sandbox%20Escape%20ve%20Backy%20Sudo%20Bypass HTB Code: Python Sandbox Escape ve Backy Sudo Bypass Code makinesi: string-based blocklist bypass, object graph ile subprocess.Popen, bcrypt SQLite şifreleri ve backy sudo JSON path traversal ile root. https://ibrahimsql.tr/posts/htb-facts-idor-traversal https://ibrahimsql.tr/api/og?title=HTB%20Facts%3A%20Camaleon%20CMS%20IDOR%2C%20Path%20Traversal%20ve%20Sudo%20Facter HTB Facts: Camaleon CMS IDOR, Path Traversal ve Sudo Facter Facts makinesi: mass-assignment ile admin yapımı, Camaleon download_private_file path traversal, MinIO bucket'ten SSH anahtarı ve --custom-dir facter ile root. https://ibrahimsql.tr/posts/htb-kobold-mcpjam-docker https://ibrahimsql.tr/api/og?title=HTB%20Kobold%3A%20MCPJam%20CVE-2026-23744%20ve%20Docker%20Grubu%20Root'u HTB Kobold: MCPJam CVE-2026-23744 ve Docker Grubu Root'u Kobold makinesi: MCPJam Inspector /api/mcp/connect ile kimlik doğrulamasız RCE, docker grubu newgrp ile active ve bind mount ile root. https://ibrahimsql.tr/posts/ios-pentesting-checklist-en https://ibrahimsql.tr/api/og?title=iOS%20Pentesting%20Checklist%3A%20A%20Practical%20Verification%20Pass iOS Pentesting Checklist: A Practical Verification Pass Step-by-step iOS pentest flow: data storage, keychain, ATS, jailbreak detection, SSL pinning, Frida hooks and traffic inspection. https://ibrahimsql.tr/posts/ios-pentesting-checklist-tr https://ibrahimsql.tr/api/og?title=iOS%20Pentest%20Checklist%3A%20Pratik%20Bir%20Do%C4%9Frulama%20Listesi iOS Pentest Checklist: Pratik Bir Doğrulama Listesi iOS uygulamalarını test ederken izlenecek adımlar: veri saklama, keychain, ATS, jailbreak tespiti, Frida ve ağ trafiği analizi. https://ibrahimsql.tr/posts/keylogging-linux-rehberi-en https://ibrahimsql.tr/api/og?title=Keylogging%20on%20Linux%2C%20Part%201%3A%20From%20Kernel%20Key%20Handling%20to%20the%20X%20Server Keylogging on Linux, Part 1: From Kernel Key Handling to the X Server How a key press travels through the kernel keyboard driver, the input subsystem, evdev and /dev/input/event nodes, then through the X server input pipeline and XKB keymap, and where loggers hook in. https://ibrahimsql.tr/posts/keylogging-linux-rehberi-tr https://ibrahimsql.tr/api/og?title=Linux'ta%20Keylogging%2C%20B%C3%B6l%C3%BCm%201%3A%20%C3%87ekirdek%20Tu%C5%9F%20%C4%B0%C5%9Flemeden%20X%20Sunucusuna Linux'ta Keylogging, Bölüm 1: Çekirdek Tuş İşlemeden X Sunucusuna Bir tuş vuruşunun çekirdek klavye sürücüsü, input altyapısı, evdev ve /dev/input/event düğümleri üzerinden X sunucusu girdi hattına ve XKB keymap'e nasıl aktığını ve logger'ların nereye bağlandığını inceliyoruz. https://ibrahimsql.tr/posts/linux-auth-ui-en https://ibrahimsql.tr/api/og?title=Security%20Architecture%20of%20Authorisation%20and%20Authentication%20UIs%20on%20the%20Linux%20Desktop Security Architecture of Authorisation and Authentication UIs on the Linux Desktop A deep architectural analysis of password prompts and permission dialogs on modern Linux: how Wayland, polkit, PAM, and xdg-desktop-portal isolate credentials and capabilities as of 2026. https://ibrahimsql.tr/posts/linux-auth-ui-tr https://ibrahimsql.tr/api/og?title=Linux%20Masa%C3%BCst%C3%BCnde%20Yetkilendirme%20ve%20Kimlik%20Do%C4%9Frulama%20Aray%C3%BCzlerinin%20G%C3%BCvenlik%20Mimarisi Linux Masaüstünde Yetkilendirme ve Kimlik Doğrulama Arayüzlerinin Güvenlik Mimarisi Parola ve onay pencerelerinin güvenlik sınırları, Wayland, polkit, PAM ve xdg-desktop-portal mimarisinin yetkilendirme ve kimlik doğrulama süreçlerini nasıl yalıttığının 2026 standartlarındaki derin teknik analizi. https://ibrahimsql.tr/posts/modern-linux-ikili-somuru-ve-savunma-2026-tr https://ibrahimsql.tr/api/og?title=Modern%20Linux%20%C4%B0kili%20Bellek%20G%C3%BCvenli%C4%9Fi%3A%20ELF%20Mimarisi%2C%20Derleyici%20Savunmalar%C4%B1%20ve%20ROP%20Mekanikleri Modern Linux İkili Bellek Güvenliği: ELF Mimarisi, Derleyici Savunmaları ve ROP Mekanikleri x86_64 ELF bellek bozulma mekaniklerinin derin teknik analizi: Derleyici korumaları (Canaries, Full RELRO, PIE, Intel CET), AddressSanitizer ile hata triyajı, ROP teorisi ve ikili savunma mühendisliği. https://ibrahimsql.tr/posts/prototype-pollution-2025 https://ibrahimsql.tr/api/og?title=Prototype%20Pollution%3A%20Engine%20Internals%2C%20Node.js%20Gadget%20Chains%2C%20and%20Hardening%20Architecture Prototype Pollution: Engine Internals, Node.js Gadget Chains, and Hardening Architecture A deep technical dissection of JavaScript prototype pollution: V8 object shapes, server-side gadget chains in Node.js child_process and template engines, client-side DOM vectors, and strong runtime mitigations. https://ibrahimsql.tr/posts/prototype-pollution-2026-tr https://ibrahimsql.tr/api/og?title=Prototype%20Pollution%3A%20V8%20Motor%20%C4%B0%C3%A7%20Mekanikleri%2C%20Node.js%20Gadget%20Zincirleri%20ve%20Savunma%20Mimarisi Prototype Pollution: V8 Motor İç Mekanikleri, Node.js Gadget Zincirleri ve Savunma Mimarisi JavaScript prototip kirlenmesinin derin teknik analizi: V8 nesne modelleri, child_process ve şablon motorları üzerinden sunucu taraflı RCE zincirleri, istemci taraflı DOM vektörleri ve çalışma zamanı sertleştirme mimarileri. https://ibrahimsql.tr/posts/regresshion-cve-2024-6387-anatomisi https://ibrahimsql.tr/api/og?title=regreSSHion%20Anatomisi%3A%20CVE-2024-6387%20OpenSSH%20Pre-Auth%20RCE%20Derinlemesine%20Analizi regreSSHion Anatomisi: CVE-2024-6387 OpenSSH Pre-Auth RCE Derinlemesine Analizi OpenSSH sunucusunda kimlik doğrulama öncesi uzaktan kod yürütme zafiyeti (CVE-2024-6387): SIGALRM sinyali, glibc ptmalloc reentrancy yarışı, heap manipülasyonu ve 9.8p1 yama analizinin tam kaynak kod incelemesi. https://ibrahimsql.tr/posts/regresshion-cve-2024-6387-anatomy-en https://ibrahimsql.tr/api/og?title=regreSSHion%20Anatomy%3A%20Deep%20Dive%20into%20OpenSSH%20Pre-Auth%20RCE%20(CVE-2024-6387) regreSSHion Anatomy: Deep Dive into OpenSSH Pre-Auth RCE (CVE-2024-6387) A deep architectural analysis of the OpenSSH pre-authentication remote code execution flaw (CVE-2024-6387): SIGALRM signal delivery, glibc ptmalloc reentrancy race conditions, heap grooming, and the 9.8p1 patch diff. https://ibrahimsql.tr/posts/rust-ve-go-ikilisi https://ibrahimsql.tr/api/og?title=Rust%20ve%20Go%3A%20%C4%B0kisi%20Birlikte%20Ne%20%C4%B0%C5%9Fe%20Yar%C4%B1yor Rust ve Go: İkisi Birlikte Ne İşe Yarıyor Rust ve Go'yu neden birlikte kullanıyorum: performans-ve-güvenlik ekseni, concurrency, dağıtım farkı ve pratik iş yükü paylaşımı. https://ibrahimsql.tr/posts/tr-burp-suite-lab-rehberi https://ibrahimsql.tr/api/og?title=Burp%20Suite%20ile%20G%C3%BCvenli%20Lab%20%C3%87al%C4%B1%C5%9Fmas%C4%B1%3A%20Ba%C5%9Flang%C4%B1%C3%A7%20Rehberi Burp Suite ile Güvenli Lab Çalışması: Başlangıç Rehberi Burp Suite öğrenirken yasal, kontrollü ve tekrar edilebilir bir laboratuvar düzeni kurmak için temel yaklaşım. https://ibrahimsql.tr/posts/tr-guvenli-nextjs-uygulama-yapisi https://ibrahimsql.tr/api/og?title=G%C3%BCvenli%20Next.js%20Uygulama%20Yap%C4%B1s%C4%B1%3A%20K%C3%BC%C3%A7%C3%BCk%20Ekipler%20%C4%B0%C3%A7in%20Pratik%20Kontrol%20Listesi Güvenli Next.js Uygulama Yapısı: Küçük Ekipler İçin Pratik Kontrol Listesi Next.js projelerinde rota, environment değişkenleri, form güvenliği ve SEO temellerini aynı anda sağlamlaştırmak için uygulanabilir bir rehber. https://ibrahimsql.tr/posts/tr-siber-guvenlik-risk-modeli https://ibrahimsql.tr/api/og?title=Siber%20G%C3%BCvenlikte%20Risk%20Modeli%3A%20%C3%96nce%20Neyi%20Korumal%C4%B1%3F Siber Güvenlikte Risk Modeli: Önce Neyi Korumalı? Siber güvenlik çalışmalarını rastgele araç denemelerinden çıkarıp ölçülebilir bir risk modeline bağlamak için pratik bir yaklaşım. https://ibrahimsql.tr/posts/tr-terminal-ag-araclari-cheatsheet https://ibrahimsql.tr/api/og?title=Terminal%20ve%20A%C4%9F%20Ara%C3%A7lar%C4%B1%20Cheatsheet%3A%20G%C3%BCnl%C3%BCk%20G%C3%BCvenlik%20%C4%B0%C5%9F%20Ak%C4%B1%C5%9F%C4%B1 Terminal ve Ağ Araçları Cheatsheet: Günlük Güvenlik İş Akışı Günlük güvenlik çalışmalarında terminal, ağ gözlemi ve dokümantasyon için kullanılan temel araç kategorileri. https://ibrahimsql.tr/posts/wayland-compositor-en https://ibrahimsql.tr/api/og?title=Wayland%20Compositor%20Security%20Architecture%20and%20Privileged%20Client%20Management Wayland Compositor Security Architecture and Privileged Client Management A deep architectural analysis of display server security: the input/output CIA triad, screencasting, input emulation (libei/EIS), session locking (ext-session-lock-v1), and sandbox isolation (security-context-v1) under 2026 standards. https://ibrahimsql.tr/posts/wayland-compositor-tr https://ibrahimsql.tr/api/og?title=Wayland%20Kompozit%C3%B6r%20G%C3%BCvenlik%20Mimarisi%20ve%20Ayr%C4%B1cal%C4%B1kl%C4%B1%20%C4%B0stemci%20Y%C3%B6netimi Wayland Kompozitör Güvenlik Mimarisi ve Ayrıcalıklı İstemci Yönetimi Görüntü sunucusu güvenlik modeli, X11 ve Wayland mimarilerinin girdi-çıktı CIA üçgeni, screencast, girdi emülasyonu (libei/EIS), oturum kilitleme (ext-session-lock-v1) ve sandbox (security-context-v1) ayrıcalıklarının 2026 standartlarında teknik analizi. https://ibrahimsql.tr/posts/zero-day-exploit-development-tutorial https://ibrahimsql.tr/api/og?title=Modern%20Linux%20Binary%20Exploitation%3A%20Memory%20Layout%2C%20Compiler%20Mitigations%2C%20and%20Gadget%20Mechanics Modern Linux Binary Exploitation: Memory Layout, Compiler Mitigations, and Gadget Mechanics An in-depth technical manual on x86_64 ELF memory corruption mechanics, compiler mitigations (Canaries, Full RELRO, PIE, Intel CET), sanitizer triage, and defensive binary engineering. https://ibrahimsql.tr/posts/en-bola-test-matrix-automation https://ibrahimsql.tr/api/og?title=Turning%20the%20BOLA%20Test%20Matrix%20into%20Automation%3A%20Keeping%20Authorization%20as%20Endpoints%20Grow Turning the BOLA Test Matrix into Automation: Keeping Authorization as Endpoints Grow Encoding the IDOR test matrix as code: a fixed set of role and tenant combinations that every new endpoint must pass before merging. https://ibrahimsql.tr/posts/en-burp-intruder-access-matrix https://ibrahimsql.tr/api/og?title=Scanning%20the%20Access%20Matrix%20with%20Burp%20Intruder%3A%20A%20Repeatable%20Setup Scanning the Access Matrix with Burp Intruder: A Repeatable Setup Scanning the authorization matrix with two sessions and an ID list: recording a baseline, bulk requests with the attacker cookie, triage by length, single-request confirmation. https://ibrahimsql.tr/posts/en-denied-request-alert-triage https://ibrahimsql.tr/api/og?title=Turning%20Denied%20Requests%20into%20Alerts%3A%20From%20Log%20to%20Triage Turning Denied Requests into Alerts: From Log to Triage Deny logs become attack signal: alert record format, scanning patterns, threshold tuning, and a response card confirmed with a single request. https://ibrahimsql.tr/posts/en-nextjs-server-actions-authorization https://ibrahimsql.tr/api/og?title=Authorization%20in%20Server%20Actions%3A%20Hiding%20the%20Button%20Is%20Not%20Protection Authorization in Server Actions: Hiding the Button Is Not Protection Next.js Server Actions are directly callable endpoints. A small policy pattern that moves the authorization check inside the action, plus how to test it. https://ibrahimsql.tr/posts/en-security-finding-scoring https://ibrahimsql.tr/api/og?title=Scoring%20Security%20Findings%3A%20An%20Impact-by-Reachability%20Table Scoring Security Findings: An Impact-by-Reachability Table CVSS alone lacks context: a practical prioritization table crossing data class and tenant breach with ease of access. https://ibrahimsql.tr/posts/en-security-logging-design https://ibrahimsql.tr/api/og?title=Security%20Logging%3A%20Who%20Accessed%20What%2C%20Decided%20How Security Logging: Who Accessed What, Decided How Authorization decisions must be observable: an event schema recording actor, tenant, object, action, and policy decision, plus how to test it. https://ibrahimsql.tr/posts/en-shadow-api-asset-inventory https://ibrahimsql.tr/api/og?title=Shadow%20APIs%20and%20Asset%20Inventory%3A%20Mapping%20the%20Attack%20Surface Shadow APIs and Asset Inventory: Mapping the Attack Surface You cannot protect an endpoint you do not know: an inventory record format and coverage metric built from code, traffic, and DNS sources. https://ibrahimsql.tr/posts/tr-bola-test-matrisi-otomasyon https://ibrahimsql.tr/api/og?title=BOLA%20Test%20Matrisini%20Otomasyona%20Ba%C4%9Flamak%3A%20Endpoint%20B%C3%BCy%C3%BCrken%20Yetki%20Nas%C4%B1l%20Korunur BOLA Test Matrisini Otomasyona Bağlamak: Endpoint Büyürken Yetki Nasıl Korunur IDOR test matrisini kod haline getirmek: rol ve tenant kombinasyonlarını otomatik test eden, yeni endpoint eklenirken çalışması zorunlu bir düzen. https://ibrahimsql.tr/posts/tr-burp-intruder-yetki-taramasi https://ibrahimsql.tr/api/og?title=Burp%20Intruder%20ile%20Yetki%20Matrisi%20Taramas%C4%B1%3A%20Tekrar%20Edilebilir%20Bir%20D%C3%BCzen Burp Intruder ile Yetki Matrisi Taraması: Tekrar Edilebilir Bir Düzen İki oturum ve bir ID listesiyle yetki matrisini taramak: baseline kaydı, saldırgan çereziyle toplu istek, uzunluk farkıyla ayıklama ve tek istekle doğrulama. https://ibrahimsql.tr/posts/tr-golge-api-varlik-envanteri https://ibrahimsql.tr/api/og?title=G%C3%B6lge%20API%20ve%20Varl%C4%B1k%20Envanteri%3A%20Sald%C4%B1r%C4%B1%20Y%C3%BCzeyini%20Haritalamak Gölge API ve Varlık Envanteri: Saldırı Yüzeyini Haritalamak Bilmediğin endpoint'i koruyamazsın: kod, trafik ve DNS kaynaklarından saldırı yüzeyini çıkaran envanter kayıt formatı ve kapsama metriği. https://ibrahimsql.tr/posts/tr-guvenlik-bulgusu-skorlama https://ibrahimsql.tr/api/og?title=G%C3%BCvenlik%20Bulgular%C4%B1n%C4%B1%20Skorlamak%3A%20Etki%20ve%20Eri%C5%9Filebilirlik%20Tablosu Güvenlik Bulgularını Skorlamak: Etki ve Erişilebilirlik Tablosu CVSS tek başına bağlam vermez: veri sınıfı ve tenant aşımı ile erişim kolaylığını çaprazlayan pratik bir önceliklendirme tablosu. https://ibrahimsql.tr/posts/tr-guvenlik-loglama-tasarimi https://ibrahimsql.tr/api/og?title=G%C3%BCvenlik%20Loglamas%C4%B1%3A%20Kim%2C%20Neye%2C%20Hangi%20Kararla%20Eri%C5%9Fti Güvenlik Loglaması: Kim, Neye, Hangi Kararla Erişti Yetki kararları gözlemlenebilir olmalı: aktör, tenant, obje, aksiyon ve policy kararını kaydeden olay şeması ve test yaklaşımı. https://ibrahimsql.tr/posts/tr-nextjs-server-actions-yetkilendirme https://ibrahimsql.tr/api/og?title=Server%20Actions'ta%20Yetkilendirme%3A%20Butonu%20Gizlemek%20Koruma%20De%C4%9Fildir Server Actions'ta Yetkilendirme: Butonu Gizlemek Koruma Değildir Next.js Server Action'lar doğrudan çağrılabilen endpoint'lerdir. Yetki kontrolünü action'ın içine taşıyan küçük bir policy deseni ve test yaklaşımı. https://ibrahimsql.tr/posts/tr-reddedilen-istek-alarm-triyaj https://ibrahimsql.tr/api/og?title=Reddedilen%20%C4%B0steklerden%20Alarm%20%C3%9Cretmek%3A%20Logdan%20Triyaja Reddedilen İsteklerden Alarm Üretmek: Logdan Triyaja Deny logları saldırı sinyaline dönüşür: alarm kaydı formatı, tarama desenleri, eşik ayarı ve tek istekle doğrulanan yanıt kartı. https://ibrahimsql.tr/posts/htb-support-writeup https://ibrahimsql.tr/api/og?title=Support%3A%20.NET%20Binary'den%20DC'ye Support: .NET Binary'den DC'ye HackTheBox Support makinesinin çözüm zinciri: SMB'de gizli binary, monodis ile XOR kimlik bilgisi, LDAP info alanı şifresi ve RBCD ile DC'ye Administrator. https://ibrahimsql.tr/posts/htb-twomillion-writeup https://ibrahimsql.tr/api/og?title=TwoMillion%3A%20Davet%20Kodundan%20Root'a TwoMillion: Davet Kodundan Root'a HackTheBox TwoMillion makinesinin nmap'ten root'a giden tam çözüm zinciri: obfuscated JS'ten davet kodu, BOLA ile admin, command injection, .env şifre tekrarı ve CVE-2023-0386. https://ibrahimsql.tr/posts/en-api-access-control-test-plan https://ibrahimsql.tr/api/og?title=Your%20API%20Has%20Roles.%20That%20Does%20Not%20Mean%20Access%20Control%20Works Your API Has Roles. That Does Not Mean Access Control Works A practical test plan for object-level authorization, tenant isolation, and API access control bugs that survive happy-path role checks. https://ibrahimsql.tr/posts/en-nextjs-private-pages-noindex-is-not-auth https://ibrahimsql.tr/api/og?title=Noindex%20Is%20Not%20Auth%3A%20Protecting%20Private%20Pages%20in%20Next.js Noindex Is Not Auth: Protecting Private Pages in Next.js How to separate link-only pages from truly private content in Next.js App Router using robots metadata, middleware, server actions, and HttpOnly cookies. https://ibrahimsql.tr/posts/tr-api-yetkilendirme-hatalari https://ibrahimsql.tr/api/og?title=API%20Yetkilendirme%20Hatalar%C4%B1%3A%20IDOR'u%20UUID%20ile%20%C3%87%C3%B6zd%C3%BC%C4%9F%C3%BCn%C3%BC%20Sanma API Yetkilendirme Hataları: IDOR'u UUID ile Çözdüğünü Sanma API güvenliğinde en pahalı hata genelde authentication değil authorization tarafında çıkar. IDOR, tenant izolasyonu ve obje bazlı kontrol için pratik bir test planı. https://ibrahimsql.tr/posts/tr-nextjs-middleware-ile-ozel-sayfa-koruma https://ibrahimsql.tr/api/og?title=Next.js'te%20%C3%96zel%20Sayfa%20Koruma%3A%20Noindex%20Yetmez%2C%20Server%20Taraf%C4%B1nda%20Kilitle Next.js'te Özel Sayfa Koruma: Noindex Yetmez, Server Tarafında Kilitle Linki bilenlerin görebileceği sayfalar ile gerçekten şifreli alanlar farklı şeylerdir. Next.js App Router'da noindex, middleware ve HttpOnly cookie ile pratik bir koruma modeli. https://ibrahimsql.tr/posts/htb-silentium-writeup https://ibrahimsql.tr/api/og?title=HackTheBox%20Silentium%20Writeup HackTheBox Silentium Writeup HTB Medium Silentium: staging subdomain, Flowise forgot-password + Mailhog, CVE-2025-59528 RCE, şifre tekrarı SSH, GOGS symlink arbitrary file write (CVE-2025-8110) ile root. https://ibrahimsql.tr/posts/metasploit-framework-guide https://ibrahimsql.tr/api/og?title=Metasploit%20Framework%3A%20Modules%2C%20Sessions%2C%20and%20Basic%20Workflows Metasploit Framework: Modules, Sessions, and Basic Workflows Metasploit organized by task: choosing modules, handling sessions, and keeping notes during a test. https://ibrahimsql.tr/posts/burp-suite-beginners https://ibrahimsql.tr/api/og?title=Burp%20Suite%20Proxy%2C%20Repeater%2C%20and%20Intruder%3A%20Intercepting%20and%20Replaying%20Web%20Requests Burp Suite Proxy, Repeater, and Intruder: Intercepting and Replaying Web Requests How Burp Suite Proxy, Repeater, and Intruder handle traffic interception and request replay, and where each fits in a manual web test. https://ibrahimsql.tr/posts/wireshark-guide https://ibrahimsql.tr/api/og?title=Wireshark%3A%20Capture%20Filters%20and%20Malicious%20Traffic%20Patterns Wireshark: Capture Filters and Malicious Traffic Patterns How to capture and analyze network traffic with Wireshark. Essential filters and techniques for spotting malicious activity. https://ibrahimsql.tr/posts/owasp-top-10-guide https://ibrahimsql.tr/api/og?title=OWASP%20Top%2010%3A%20What%20Each%20Risk%20Category%20Covers OWASP Top 10: What Each Risk Category Covers The ten OWASP risk categories summarized: from Broken Access Control to Injection, with prevention pointers. https://ibrahimsql.tr/posts/top-10-bug-bounty-tools https://ibrahimsql.tr/api/og?title=A%20Small%20Bug%20Bounty%20Toolkit%3A%20What%20Each%20Tool%20Actually%20Does A Small Bug Bounty Toolkit: What Each Tool Actually Does Burp Suite, SQLmap, Shodan, and similar tools grouped by task: interception, enumeration, and verification in a manual test. https://ibrahimsql.tr/posts/ios-android-hacking-guide https://ibrahimsql.tr/api/og?title=Mobile%20App%20Testing%20Notes%3A%20APK%20Analysis%2C%20Jailbreak%20Detection%2C%20and%20Traffic%20Interception Mobile App Testing Notes: APK Analysis, Jailbreak Detection, and Traffic Interception Manual mobile test tasks: decompiling APKs, dealing with jailbreak and root detection, and intercepting TLS traffic. https://ibrahimsql.tr/posts/wordpress-exploitation-guide-2025 https://ibrahimsql.tr/api/og?title=WordPress%20Attack%20Surface%3A%20Plugins%2C%20Themes%2C%20and%20Core%20Misconfigurations WordPress Attack Surface: Plugins, Themes, and Core Misconfigurations Where WordPress findings usually come from: plugin and theme flaws plus core misconfigurations, and how testers narrow that surface. https://ibrahimsql.tr/posts/aws-cloud-penetration-testing-secrets https://ibrahimsql.tr/api/og?title=AWS%20Penetration%20Testing%20Notes%3A%20S3%2C%20IAM%2C%20and%20Lambda%20Misconfigurations AWS Penetration Testing Notes: S3, IAM, and Lambda Misconfigurations Common AWS findings: exposed S3 buckets, IAM misconfigurations, and Lambda weaknesses, grouped by service. https://ibrahimsql.tr/posts/social-engineering-masterclass https://ibrahimsql.tr/api/og?title=Social%20Engineering%3A%20Phishing%2C%20Vishing%2C%20and%20Physical%20Breach%20Patterns Social Engineering: Phishing, Vishing, and Physical Breach Patterns Recurring social-engineering patterns across phishing, vishing, and physical intrusion attempts. https://ibrahimsql.tr/posts/penetration-testing-roadmap-2025 https://ibrahimsql.tr/api/og?title=Penetration%20Testing%20Reading%20Order%3A%20Skills%2C%20Certifications%2C%20and%20Tools Penetration Testing Reading Order: Skills, Certifications, and Tools A suggested study order for starting penetration testing: networking basics, security fundamentals, then practical labs. https://ibrahimsql.tr/posts/xss-comprehensive-guide https://ibrahimsql.tr/api/og?title=XSS%20Types%20Compared%3A%20Reflected%2C%20Stored%2C%20and%20DOM-Based%20Behavior XSS Types Compared: Reflected, Stored, and DOM-Based Behavior How reflected, stored, and DOM-based XSS differ in delivery and execution, with prevention notes tied to each type. https://ibrahimsql.tr/posts/sql-injection-mastery https://ibrahimsql.tr/api/og?title=SQL%20Injection%3A%20Types%2C%20Manual%20Detection%2C%20and%20Parameterized%20Queries SQL Injection: Types, Manual Detection, and Parameterized Queries In-band, blind, and out-of-band SQL injection compared, with manual detection notes and parameterized-query prevention. https://ibrahimsql.tr/posts/web-hacking-101-2025 https://ibrahimsql.tr/api/og?title=Web%20Hacking%3A%20Client-Side%20and%20Server-Side%20Vulnerability%20Classes Web Hacking: Client-Side and Server-Side Vulnerability Classes A map of web vulnerability classes, split by client-side and server-side, for planning what to study next. https://ibrahimsql.tr/posts/attacking-secondary-contexts https://ibrahimsql.tr/api/og?title=Attacking%20Secondary%20Contexts%20in%20Web%20Applications Attacking Secondary Contexts in Web Applications Secondary contexts testers check after the main flow: log files, admin panels, and background jobs. https://ibrahimsql.tr/posts/waf-bypass-unicode https://ibrahimsql.tr/api/og?title=Bypassing%20WAFs%20with%20Unicode%20Compatibility Bypassing WAFs with Unicode Compatibility When a WAF inspects input before Unicode normalization but the backend processes it after, compatibility characters can slip through. https://ibrahimsql.tr/posts/ai-security-testing https://ibrahimsql.tr/api/og?title=LLM-Assisted%20Security%20Testing%3A%20Payloads%2C%20Code%20Review%2C%20and%20Detection%20Notes LLM-Assisted Security Testing: Payloads, Code Review, and Detection Notes Where LLMs fit in a manual test: payload drafting, code review assistance, and detection support, with limits. https://ibrahimsql.tr/posts/smart-contract-auditing https://ibrahimsql.tr/api/og?title=Smart%20Contract%20Auditing%3A%20Reentrancy%20and%20Common%20Solidity%20Flaws Smart Contract Auditing: Reentrancy and Common Solidity Flaws Solidity audit starting points: reentrancy and other frequent flaws, plus Slither and Mythril usage notes. https://ibrahimsql.tr/posts/zap-2-16-review https://ibrahimsql.tr/api/og?title=OWASP%20ZAP%202.16%3A%20New%20Features%20and%20Scan%20Comparison%20Notes OWASP ZAP 2.16: New Features and Scan Comparison Notes Notes on OWASP ZAP 2.16: new features, performance observations, and differences from paid scanners. https://ibrahimsql.tr/posts/automating-dead-link-detection https://ibrahimsql.tr/api/og?title=Dead%20Link%20Detection%3A%20Subdomain%20Takeover%20and%20Phishing%20Risk Dead Link Detection: Subdomain Takeover and Phishing Risk Broken links as attack surface: subdomain takeovers and phishing via dangling references, with automation notes. https://ibrahimsql.tr/posts/hidden-xss-no-interaction https://ibrahimsql.tr/api/og?title=Zero-Interaction%20XSS%3A%20Payloads%20in%20Metadata%2C%20Filenames%2C%20and%20API%20Responses Zero-Interaction XSS: Payloads in Metadata, Filenames, and API Responses XSS vectors that trigger without a click: metadata, filenames, and API responses rendering unsanitized content.