Serhatcck/history-poison-lab
History Poison Lab: Vulnerable LLM implementation demonstrating Chat History Poisoning attacks. Learn how attackers manipulate chat context and explore mitigation strategies for secure LLM applications.
Security Researcher & Software engineer
Repositories
Serhatcck/mobile-security-mcp
Mobile app security analysis MCP server for Android APK and iOS IPA files
Serhatcck/Android-API-Extractor
Extract API endpoints in APK
Serhatcck/idor-in-ai-tools
IDOR / Broken Object-Level Authorization in AI agent tool-calling — a hands-on vulnerable lab. An LLM tool trusts the object id it is handed and skips the ownership check, so any user reads any tenant's data.
Serhatcck/serhatcck.github.io
Serhatcck/vulnsocket
Vulnerable Web Socket-Web Site
Serhatcck/server-side-prototype-pollution
A website developed with Nodejs. This website includes server side prototype pollution vulnerability
Serhatcck/zip-slip
Zipslip vulnerable machine
Serhatcck/hidden_fuzzer
Fast web content discovery tool written in Go. Automatically filters false positives using Jaro-Winkler similarity — no matchers or filters needed.
Serhatcck/Information-Gathering
Serhatcck/AES
Implementation of Rijndael cipher algorithm
Serhatcck/pentest
Serhatcck/android_aes_encryption
Serhatcck/portswigger
Serhatcck/Burp-Extension-DPoP
Burp Extension DPoP
Serhatcck/tls-scan
An Internet scale, blazing fast SSL/TLS scanner ( non-blocking, event-driven )
Serhatcck/golang
go tool for cyber sec
Serhatcck/LLM-Bias
Serhatcck/ssl-search
Serhatcck/yzt-ctf
Serhatcck/burp-mcp-server
MCP Server for Burp
Serhatcck/hidden_crawler
Serhatcck/nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.