alicangnll Goto Github PK

followers: 61.0 following: 7.0 repos: 81.0 gists: 33.0

Name: Ali Can Gönüllü

Type: User

Bio: Paylaşımlarım sadece eğitim amaçlıdır.

Location: Turkey.Random();

Blog: https://alicangonullu.com

💫 About Me:

I have been trying to specialize in Cyber Security since 2015.

In 2018, I was first awarded the "Hall of Fame" award by Intel because I found a Stored XSS vulnerability on the website.
In 2019, RCE vulnerability I found in Roxy Fileman 1.4.5 software was included in the CVE MITRE system with the code "CVE-2019-7174".
In 2019, the Cross Site Request Forgery vulnerability I found in version 1.0.0.12 of the AirTies Air 5341 router model was included in the CVE MITRE system with the code "CVE-2019-6967".
In 2019, the Cross Site Request Forgery vulnerability I found in version 1.00 (AAXM.6)C0 of the Zyxel NBG-418N v2 router model was included in the CVE MITRE system with the code "CVE-2019-6710".
In 2022, the Cross Site Scripting vulnerability I found in the Metro UI software was included in the CVE MITRE system with the code "CVE-2022-41376"
In 2022, I found a Stored XSS vulnerability in the "0.3.7" version of the "Crontab" module of the pfSense Firewall software, and I reported it to Netgate and helped solve the problem.
In 2022, I also found various vulnerabilities in Bosch company and RMIT University, but unfortunately these vulnerabilities were considered "Informal".
In 2023, I was included in the "Hall of Fame" list due to the vulnerability I found on the Cisco company's website.

In 2021, I started working as a Cyber Security Specialist at Defans Security. Within the company,

Web Penetration Tests (PHP, Python, JavaScript, ASP.NET etc.),
LAN and WAN Network Penetration Tests (Servers, Storages, Firewalls, Switches, Virtual Machines, etc.),
Cloud Penetration Tests (AWS and Azure),
For the SOC team with EDR / XDR configurations,
IDS / IPS configurations of Sophos, Fortigate and pfSense firewall devices and software,
Wazuh SIEM installation
Wazuh SIEM configurations
Wazuh SIEM rule writing and updating the rules.
Splunk SIEM installation
Splunk SIEM configurations
Splunk SIEM rule writing and updating the rules.

Never considering myself sufficient, I continue my path of learning in the light of my past experiences.

🏆 Hall of Fame(s):

Cisco - Hall of Fame (2023)
CVE MITRE - CVE-2022-41376 (2022)
pfSense - pfSense Firewall 2.6.x-2.5.x Cross-site Scripting (2022)
CVE MITRE - CVE-2019-6710 (2019)
CVE MITRE - CVE-2019-6967 (2019)
CVE MITRE - CVE-2019-7174 (2019)
Intel - Certificate of Appreciation (2018)

🌐 Socials:

💻 Tech Stack:

🏆 GitHub Trophies

🌐 Visitors:

Ali Can Gönüllü's Projects

alidev-yks-dgs

YKS-DGS Hesaplama Motoru (2018 Katsayıları)

antivirus-drivers

Antivirus Drivers for Cyber Security Researchers

apollo-11

Original Apollo 11 Guidance Computer (AGC) source code for the command and lunar modules.

awesome-forensics

A curated list of awesome forensic analysis tools and resources

centvm-pxeui-php

CentVM PXE / NetBoot Web Server UI | PHP 7.2+

ceres-os-projesi

Ceres OS | C# Ile Yazılmış Türkiyenin Ilk Sistemi !

cisco-command-sender

Cisco, Zyxel, Ubiquiti, Sophos, Aruba, Mikrotik and others auto command sender

Cobalt Strike is a commercial, full-featured, remote access tool that bills itself as "adversary simulation software designed to execute targeted attacks and emulate the post-exploitation actions of advanced threat actors". Cobalt Strike’s interactive post-exploit capabilities cover the full range of ATT&CK tactics, all executed within a single, integrated system.