# ayberk.ninja

> Mehmet Ayberk's personal cybersecurity blog, with technical articles in English and Turkish about application security, AWS and cloud security, and AI/ML security.

## About

- [About Mehmet Ayberk](https://ayberk.ninja/about.html.md): Professional background, community work, and seminars.
- [Security advisories](https://ayberk.ninja/zeroDay/index.html.md): Published vulnerability and CVE references.
- [Presentations](https://ayberk.ninja/presentation/index.html.md): Application security presentation material.

## Articles

- [Beyond the Tensors: Exploring the Universal Vulnerabilities of ML Model Formats](https://ayberk.ninja/universal-vulnerabilities-of-ml-models.md): Explore insecure deserialization in ML model formats, PyTorch and Joblib attack paths, scanner bypasses and safer alternatives.
- [Managing Security Alarms with Automation in AWS](https://ayberk.ninja/managing-security-alarms-with-automation-in-aws.md): Build automated AWS security responses with Config, CloudTrail, EventBridge, Lambda and Security Hub.
- [HTTP Güvenlik Başlıklarını Atlatmak](https://ayberk.ninja/http-guvenlik-basliklarini-atlatmak.md): HttpOnly, X-Frame-Options ve Content-Security-Policy gibi HTTP güvenlik kontrollerinin senaryo bağımlı bypass yöntemleri.
- [Incident Response On AWS](https://ayberk.ninja/incident-response-on-aws.md): A practical guide to AWS incident response using Incident Manager, CloudWatch, runbooks, isolation and automated remediation.
- [Detection of Malicious Content in Files Uploaded to S3 Bucket](https://ayberk.ninja/detection-of-malicious-content-in-files-uploaded-to-S3-bucket.md): Compare open-source and commercial approaches for detecting and responding to malicious files uploaded to Amazon S3 buckets.
- [Bulutlara Dokunmak ☁️ - AWS/Exploitation](https://ayberk.ninja/aws-exploitation.md): AWS ortamlarında Cognito, S3, EC2 metadata, Lambda ve IAM servisleri üzerinden exploitation teknikleri ve güvenlik kontrolleri.
- [Bulutlara Dokunmak ☁️ - AWS/Enumeration](https://ayberk.ninja/aws-enumeration.md): AWS ortamlarında güvenlik odaklı enumeration, keşif yöntemleri, S3 bucket araştırması ve IAM bilgi toplama teknikleri.
- [Hello World 👋](https://ayberk.ninja/hello-world.md): Welcome to ayberk.ninja, a bilingual application security blog covering web, cloud and offensive security research.