Emirhan Kaplan

I’m a B.Sc. in Computer Engineering student (Senior Year, in progress) with a strong focus on security. My Senior Project—“Security Assessment and Vulnerability Mitigation in Modern Web Architectures”—targets OWASP Top 10 issues, including JWT authentication bypasses, SSRF, and Path Traversal. I’m also actively working through PortSwigger Web Security Academy labs and preparing for the OSCP certification.

In my internship at i2i Systems, I helped build “Evren Cell,” a real-time Online Charging System for telecommunication infrastructures. I implemented and managed a distributed in-memory data grid using Hazelcast and Java for high-availability, low-latency caching, and I integrated Hazelcast into an event-driven architecture working with Apache Kafka, Akka, VoltDB, and Oracle DB to support high-volume concurrent transactions.

I carry that same security-driven mindset into my projects and research. I’ve built security tooling like Ariadne (attack-path decision engine), WindowsPE (offline PWA for privilege-escalation methodology), and cyber-range experiences such as Kalkan Cyber Range and RangeForge, while also participating in public Bug Bounty programs on HackerOne. As an independent security researcher, I focus on web/API security and Active Directory exploitation (e.g., Kerberoasting, AS-REP Roasting, Pass-the-Hash), plus static/dynamic malware analysis and buffer overflow exploit development.