# Tağmaç — Cyber Security Researcher & Exploit Developer

> Tağmaç is a Cyber Security Consultant and Vulnerability Researcher specialized in ethical hacking, web security, and exploit development. Explore his findings, CVEs, and technical blog.

## Author

Tağmaç Han is a Senior Cyber Security Consultant and Vulnerability Researcher based in Turkey with 9+ years of experience in red teaming, exploit development, and penetration testing. Certifications: OSWE, OSCP, CEH, eMAPT. Works at the intersection of offensive security research, CVE discovery, and backend development. Has disclosed vulnerabilities in enterprise products and published exploit codes on Exploit-DB.

This site is fully bilingual (English + Turkish). Every blog post and project has a server-rendered Turkish version at its own Turkish-slug URL, linked via hreflang. English URLs are listed first; the Turkish equivalents are listed under "Turkish Content" below.

## Key Pages

- [About](https://tagmachan.com/whos.tagox): Author background, philosophy, and areas of expertise
- [Resume](https://tagmachan.com/resume/): Full professional history, education, and skills
- [Blog](https://tagmachan.com/blog/): Security research articles and technical deep dives
- [Exploits](https://tagmachan.com/exploits/): Published exploit codes and CVE disclosures
- [Hub](https://tagmachan.com/hub.tagox): Research hubs organized by attack category (RCE, SSRF, Race Condition)
- [Tools](https://tagmachan.com/tools.tagox): Interactive offensive-security tools (reverse shell generator, encoders, and more)
- [Cheatsheets](https://tagmachan.com/cheatsheets/): Quick-reference security cheatsheets
- [Threat Feeds](https://tagmachan.com/feeds.tagox): Fed0gaT threat intelligence feed aggregator
- [RSS Feed (English)](https://tagmachan.com/feed.xml): Atom feed of blog posts
- [RSS Feed (Türkçe)](https://tagmachan.com/feed-tr.xml): Atom feed of Turkish blog posts

## Blog Posts


- [Windows Credential Access: LSASS, DPAPI, SAM, and Browser Secrets](https://tagmachan.com/windows-credential-access.tagox): A complete attacker's guide to Windows credential access: LSASS internals and SSP architecture, DPAPI master key hierarchy, SAM and NTDS extraction, Credential Manager abuse, browser credential decryption (Chrome AES-GCM + DPAPI, Firefox NSS), and GPP credentials — with OPSEC ratings and detection guidance.

- [Kerberos Protocol Internals: Tickets, PAC, and the Security Implications](https://tagmachan.com/kerberos-protocol-internals.tagox): A deep technical dive into Kerberos 5 internals: TGT/TGS structure, PAC buffer breakdown, encryption type selection, AS exchange, S4U extensions, and how Golden/Diamond/Silver Tickets exploit these structures at the byte level — with Wireshark analysis and detection guidance.

- [BloodHound CE for Defensive AD Analysis: Attack Path Management](https://tagmachan.com/bloodhound-ce-defensive-ad-analysis.tagox): How to use BloodHound Community Edition defensively: tier model implementation, attack path discovery and prioritization, custom Cypher queries for blue teams, remediation workflows, and continuous AD exposure management — based on SpecterOps Attack Path Management.

- [AD Certificate Services Deep Dive: ESC1 to ESC8 Attack Paths](https://tagmachan.com/adcs-deep-dive-esc1-esc8.tagox): A deep-dive into every ADCS misconfiguration from ESC1 to ESC10: template flag analysis, certificate anatomy, NTLM relay chains, ManageCA abuse, and the ESC8+PetitPotam combo — with certipy walkthroughs and defenses based on SpecterOps 'Certified Pre-Owned'.

- [Active Directory Security Testing: The Complete Attacker's Perspective](https://tagmachan.com/active-directory-security-testing.tagox): A complete attacker's methodology for Active Directory assessments: enumeration, Kerberoasting, AS-REP Roasting, ACL/attribute abuse, Shadow Credentials, ADCS ESC1-ESC8, delegation attacks, DCSync, ZeroLogon, noPac, PetitPotam, GPO abuse, trust attacks, and persistence — with commands, tools, and detection guidance.

- [Web Cache Deception & Poisoning: Weaponizing the Gap Between Cache and Origin](https://tagmachan.com/web-cache-deception-and-poisoning.tagox): Two sides of cache abuse — Web Cache Deception tricks a CDN into storing a victim's private page, while Web Cache Poisoning injects a malicious response served to every visitor. How cache-key vs origin parsing discrepancies create both, with real-world chains and defenses.

- [SSRF to Cloud Credentials: Stealing AWS IAM Tokens via Metadata API](https://tagmachan.com/ssrf-cloud-credential-theft.tagox): How a single Server-Side Request Forgery vulnerability can escalate to full AWS/GCP/Azure account compromise by targeting cloud instance metadata services — and why the 452% SSRF surge in 2024 matters.

- [HTTP Request Smuggling: Exploiting Front-End/Back-End Parsing Desync](https://tagmachan.com/http-request-smuggling-desync.tagox): How attackers exploit disagreements between front-end and back-end servers on where HTTP requests begin and end — and chain CL.TE desync attacks into account takeover, firewall bypass, and cache poisoning.

- [Blind SSTI to RCE: Exploiting Template Engines Without Output](https://tagmachan.com/blind-ssti-to-rce.tagox): How attackers detect and exploit Server-Side Template Injection when the application returns no output — using timing delays, DNS callbacks, and engine fingerprinting to achieve full remote code execution.

- [Prototype Pollution to RCE: Node.js Gadget Chains Explained](https://tagmachan.com/prototype-pollution-to-rce-nodejs.tagox): How injecting properties into JavaScript's Object.prototype poisons the entire Node.js process — and how gadget chains turn that pollution into remote code execution, demonstrated via CVE-2024-38999 in RequireJS.

- [Single-Packet Race Condition: Sub-Millisecond Web Exploitation](https://tagmachan.com/single-packet-race-condition.tagox): How the single-packet attack technique eliminates network jitter to exploit sub-millisecond race conditions in web applications — and how CVE-2024-58248 in nopCommerce was exploited using Burp Suite.

- [Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server](https://tagmachan.com/confusion-attacks-apache-http-server.tagox): How Orange Tsai's Confusion Attacks exploit URL decoding inconsistencies across Apache modules to chain ACL bypass, SSRF, and unauthenticated RCE — #1 web hacking technique of 2024.

- [CVE-2025-69460 – Simple Image Gallery 1.0 - Remote Code Execution (Unauthenticated)](https://tagmachan.com/simple-image-gallery-1-0-remote-code-execution-unauthenticated.tagox): CVE-2025-69460: Unauthenticated Remote Code Execution (RCE) vulnerability in Simple Image Gallery 1.0. Zero-day discovery and exploit by Tağmaç 'Tagoletta'. Full writeup with PoC exploit code.

- [CVE-2025-69457 – Responsive Tourism Website 3.1 - Remote Code Execution (Unauthenticated)](https://tagmachan.com/responsive-tourism-website-3-1-remote-code-execution-unauthenticated.tagox): CVE-2025-69457: Unauthenticated Remote Code Execution (RCE) vulnerability in Responsive Tourism Website 3.1. Zero-day discovery and exploit by Tağmaç 'Tagoletta'. Full writeup with PoC exploit code.

- [CVE-2023-38890 – Online Shopping Portal 3.1 Remote Code Execution](https://tagmachan.com/online-shopping-portal-3-1-sql-injection-to-remote-code-execution-unauthenticated.tagox): CVE-2023-38890: Unauthenticated SQL Injection to Remote Code Execution (RCE) vulnerability in Online Shopping Portal 3.1. Zero-day discovery and exploit by Tağmaç 'Tagoletta'. Full writeup with PoC exploit code.

- [CVE-2025-69458 – Movie Rating System 1.0 - SQL Injection to RCE (Unauthenticated)](https://tagmachan.com/movie-rating-system-1-0-sql-injection-to-rce-unauthenticated.tagox): CVE-2025-69458: Unauthenticated SQL Injection to Remote Code Execution (RCE) vulnerability in Movie Rating System 1.0. Zero-day discovery and exploit by Tağmaç 'Tagoletta'. Full writeup with PoC exploit code.

- [CVE-2025-69459 – Movie Rating System 1.0 - Broken Access Control](https://tagmachan.com/movie-rating-system-1-0-broken-access-control-admin-account-creation.tagox): CVE-2025-69459: Broken Access Control vulnerability allowing Admin Account Creation in Movie Rating System 1.0. Zero-day discovery and exploit by Tağmaç 'Tagoletta'. Full writeup with PoC exploit code.

- [Building a Compact Cyber Security Home Lab with Proxmox](https://tagmachan.com/proxmox-home-lab.tagox): Turning a modest notebook into a powerhouse running Tor, Exploit Dev, Docker, and OPNsense environments.

- [Traffic Offense Management System 1.0 - Remote Code Execution (Unauthenticated)](https://tagmachan.com/traffic-offense-management-system-1-0-remote-code-execution-unauthenticated.tagox): Zero-Day Discovery & Exploit Development: unauthenticated SQL Injection to RCE in Traffic Offense Management System 1.0. Full writeup with PoC exploit code by Tağmaç 'Tagoletta'.


## Projects & CVEs


- [SiberGuvenlik Baskanligi Blocklist API](https://tagmachan.com/siberguvenlik-baskanligi-blocklist-api.tagox): An open-source tool that mirrors Turkey's Cybersecurity Directorate (T.C. Siber Güvenlik Başkanlığı) threat-intelligence feeds as firewall-ready blocklists — five address types, time-windowed lists (30/60/90/120 days and full), refreshed hourly by GitHub Actions with no server required. Nearly 483,000 records ready to drop straight into pfSense, OPNsense, MikroTik, Pi-hole, ipset, and Squid.

- [AccessContextFuzzer - Burp Suite Extension](https://tagmachan.com/accesscontextfuzzer-burp-suite-extension.tagox): A Burp Suite extension (Montoya API) that automatically generates and tests hundreds of access-control-bypass, path-traversal, and Web Cache Deception variants in seconds. Features 40+ header spoofing techniques, a four-phase WCD pipeline with automatic MISS→HIT cache confirmation and no-auth Verify WCD, parallel fuzzing, CDN profiles, sensitive-data detection, and custom rules — lab-proven on official PortSwigger Web Security Academy challenges.

- [Fed0gaT — Threat Intelligence Feed](https://tagmachan.com/fed0gat-threat-intelligence-feed.tagox): Fed0gaT is an automated threat intelligence aggregation system that collects, deduplicates, and publishes hourly feeds of malicious IPs, file hashes, and URLs from multiple open-source intelligence sources. Feeds are published to GitHub and available as plain-text for direct integration into SIEM, EDR, and firewall platforms.

- [CVE-2025-69460 - Simple Image Gallery 1.0 - Remote Code Execution (Unauthenticated) - Exploit Code](https://tagmachan.com/cve-2025-69460-simple-image-gallery-1-0-remote-code-execution-unauthenticated-exploit.tagox): CVE-2025-69460: Unauthenticated Remote Code Execution (RCE) vulnerability in Simple Image Gallery 1.0. Zero-day discovery and exploit by Tağmaç 'Tagoletta'.

- [CVE-2025-69459 - Movie Rating System 1.0 - Broken Access Control (Admin Account Creation) - Exploit Code](https://tagmachan.com/cve-2025-69459-movie-rating-system-1-0-broken-access-control-exploit.tagox): CVE-2025-69459: Broken Access Control vulnerability allowing Admin Account Creation in Movie Rating System 1.0. Zero-day discovery and exploit by Tağmaç 'Tagoletta'.

- [CVE-2025-69458 - Movie Rating System 1.0 - SQL Injection to RCE (Unauthenticated) - Exploit Code](https://tagmachan.com/cve-2025-69458-movie-rating-system-1-0-sqli-to-rce-exploit.tagox): CVE-2025-69458: Unauthenticated SQL Injection to Remote Code Execution (RCE) vulnerability in Movie Rating System 1.0. Zero-day discovery and exploit by Tağmaç 'Tagoletta'.

- [CVE-2025-69457 - Responsive Tourism Website 3.1 - Remote Code Execution (Unauthenticated) - Exploit Code](https://tagmachan.com/cve-2025-69457-responsive-tourism-website-3-1-remote-code-execution-unauthenticated-exploit.tagox): CVE-2025-69457: Unauthenticated Remote Code Execution (RCE) vulnerability in Responsive Tourism Website 3.1. Zero-day discovery and exploit by Tağmaç 'Tagoletta'.

- [CVE-2023-38890 – Online Shopping Portal 3.1 Remote Code Execution - Exploit Code](https://tagmachan.com/cve-2023-38890-online-shopping-portal-3-1-sql-injection-to-remote-code-execution-unauthenticated-exploit.tagox): CVE-2023-38890: Unauthenticated SQL Injection to Remote Code Execution (RCE) vulnerability in Online Shopping Portal 3.1. Zero-day discovery and exploit by Tağmaç 'Tagoletta'.

- [Daily CVE Reporter](https://tagmachan.com/daily-cve-reporter.tagox): Daily CVE Reporter is an automated security tool designated to keep researchers updated on the latest vulnerabilities. It fetches new CVEs from the National Vulnerability Database every 24 hours, automatically detects if a Proof of Concept (PoC) exploit exists, and presents the data in a clean, interactive HTML report.

- [Daily AbuseIP Collector](https://tagmachan.com/daily-abuseip-collector.tagox): The Daily AbuseIP Collector is a .NET 9.0 console application designed to run as a background service within a Docker container. Its primary purpose is to automatically fetch, filter, and store a list of abusive IP addresses from a public blocklist into a MongoDB database. 

- [Traffic Offense Management System 1.0 - SQLi to Remote Code Execution (RCE) (Unauthenticated) - Exploit Code](https://tagmachan.com/traffic-offense-management-system-1-0-remote-code-execution-unauthenticated-exploit.tagox): Zero-Day Exploit Code for Traffic Offense Management System RCE.


## Turkish Content (Türkçe İçerik)

Server-rendered Turkish versions of the posts and projects above, at Turkish-slug URLs.

### Blog Yazıları (Turkish Blog Posts)


- [Windows Kimlik Bilgisi Erişimi: LSASS, DPAPI, SAM ve Tarayıcı Sırları](https://tagmachan.com/windows-kimlik-bilgisi-erisimi-lsass-dpapi-sam-ve-tarayici-sirlari.tagox): Windows kimlik bilgisi erişiminin eksiksiz saldırgan rehberi: LSASS iç yapısı ve SSP mimarisi, DPAPI ana anahtar hiyerarşisi, SAM ve NTDS çıkarımı, Credential Manager kötüye kullanımı, tarayıcı kimlik bilgisi şifre çözme (Chrome AES-GCM + DPAPI, Firefox NSS) ve GPP kimlik bilgileri — OPSEC puanları ve tespit rehberiyle.

- [Kerberos Protokolü İçselleştirme: Biletler, PAC ve Güvenlik Etkileri](https://tagmachan.com/kerberos-protokolu-icsellestirme-biletler-pac-ve-guvenlik-etkileri.tagox): Kerberos 5 protokolünün derinlemesine teknik analizi: TGT/TGS yapısı, PAC buffer detayları, şifreleme tipi seçimi, AS değişimi, S4U uzantıları ve Golden/Diamond/Silver Ticket saldırılarının bu yapıları byte seviyesinde nasıl istismar ettiği — Wireshark analizi ve tespit rehberiyle.

- [BloodHound CE ile Defensif AD Analizi: Saldırı Yolu Yönetimi](https://tagmachan.com/bloodhound-ce-ile-defensif-ad-analizi-saldiri-yolu-yonetimi.tagox): BloodHound Community Edition'ı defensif amaçlarla kullanma rehberi: tier model implementasyonu, saldırı yolu keşfi ve önceliklendirme, blue team için Cypher sorguları, iyileştirme iş akışları ve sürekli AD maruz kalma yönetimi — SpecterOps Attack Path Management'a atıfla.

- [AD Sertifika Servisleri Derinlemesine: ESC1'den ESC8'e Tüm Saldırı Yolları](https://tagmachan.com/ad-sertifika-servisleri-derinlemesine-esc1den-esc8e-tum-saldiri-yollari.tagox): ESC1'den ESC10'a her ADCS yanlış yapılandırmasının derinlemesine analizi: şablon flag analizi, sertifika anatomisi, NTLM relay zincirleri, ManageCA abuse ve ESC8+PetitPotam kombinasyonu — certipy walkthrough ve savunmalar. SpecterOps 'Certified Pre-Owned' araştırmasına atıfla.

- [Active Directory Güvenlik Testi: Saldırganın Gözünden Kapsamlı Rehber](https://tagmachan.com/active-directory-guvenlik-testi-saldirganin-gozunden-kapsamli-rehber.tagox): Active Directory güvenlik testinde saldırgan metodolojisinin tamamı: numaralandırma, Kerberoasting, AS-REP Roasting, ACL/attribute abuse, Shadow Credentials, ADCS ESC1-ESC8, delegation saldırıları, DCSync, ZeroLogon, noPac, PetitPotam, GPO abuse, trust saldırıları ve kalıcılık — komutlar, araçlar ve tespit rehberiyle.

- [Web Cache Deception & Poisoning: Cache ile Origin Arasındaki Boşluğu Silaha Dönüştürmek](https://tagmachan.com/web-cache-deception-poisoning-cache-ile-origin-arasindaki-boslugu-silaha-donusturmek.tagox): Cache istismarının iki yüzü — Web Cache Deception, bir CDN'i kurbanın özel sayfasını saklaması için kandırır; Web Cache Poisoning ise her ziyaretçiye sunulan zararlı bir yanıt enjekte eder. Cache-key ile origin parsing tutarsızlıklarının ikisini de nasıl doğurduğu, gerçek dünya zincirleri ve savunmalar.

- [SSRF'ten Cloud Kimlik Bilgisi Hırsızlığına: Metadata API Üzerinden AWS IAM Token Çalma](https://tagmachan.com/ssrften-cloud-kimlik-bilgisi-hirsizligina-metadata-api-uzerinden-aws-iam-token-calma.tagox): Tek bir Server-Side Request Forgery zafiyetinin, bulut örneği metadata servislerini hedefleyerek tam AWS/GCP/Azure hesap ele geçirmesine nasıl tırmandığı — ve 2024'teki %452 SSRF artışının neden önemli olduğu.

- [Blind SSTI'dan RCE'ye: Çıktısız Template Engine Sömürüsü](https://tagmachan.com/blind-sstidan-rceye-ciktisiz-template-engine-somurusu.tagox): Uygulama çıktı döndürmediğinde Server-Side Template Injection'ın zamanlama gecikmeleri, DNS callback'leri ve engine parmak izi teknikleriyle nasıl tespit edilip sömürülerek tam uzaktan kod çalıştırmaya ulaşıldığı.

- [HTTP Request Smuggling: Front-End/Back-End HTTP Parse Uyumsuzluğunu Sömürmek](https://tagmachan.com/http-request-smuggling-front-end-back-end-http-parse-uyumsuzlugunu-somurmek.tagox): Saldırganlar, ön-uç ve arka-uç sunucuların HTTP isteğinin nerede başlayıp bittiği konusundaki uyumsuzluğunu nasıl sömürür — ve CL.TE desync saldırıları hesap ele geçirme, güvenlik duvarı bypass ve önbellek zehirlemeye nasıl zincirlenir.

- [Prototype Pollution'dan RCE'ye: Node.js Gadget Zincirleri](https://tagmachan.com/prototype-pollutiondan-rceye-nodejs-gadget-zincirleri.tagox): JavaScript'in Object.prototype'ına özellik enjekte etmek, tüm Node.js sürecini nasıl zehirler — ve gadget zincirleri bu kirliliği nasıl uzaktan kod çalıştırmaya dönüştürür. CVE-2024-38999 (RequireJS) üzerinden gösterim.

- [Single-Packet Race Condition: Web Uygulamalarında Milisaniyenin Altında Exploitation](https://tagmachan.com/single-packet-race-condition-web-uygulamalarinda-milisaniyenin-altinda-exploitation.tagox): Single-packet attack tekniği, ağ titremesini ortadan kaldırarak web uygulamalarındaki milisaniye altı race condition'ları nasıl sömürür — ve Burp Suite ile nopCommerce'deki CVE-2024-58248 nasıl exploit edildi.

- [Confusion Attacks: Apache HTTP Server'daki Gizli Semantik Belirsizliği Sömürmek](https://tagmachan.com/confusion-attacks-apache-http-serverdaki-gizli-semantik-belirsizligi-somurmek.tagox): Orange Tsai'nin Confusion Attacks araştırması: Apache modülleri arasındaki URL decode tutarsızlıklarını kullanarak ACL bypass, SSRF ve kimlik doğrulamasız RCE zinciri oluşturma — 2024'ün 1 numaralı web hacking tekniği.

- [CVE-2025-69459 – Movie Rating System 1.0 - Broken Access Control](https://tagmachan.com/movie-rating-system-1-0-broken-access-control-admin-account-creation-tr.tagox): CVE-2025-69459: Movie Rating System 1.0 üzerinde Erişim Kontrolü Hatası (Yetkisiz Admin Hesabı). Keşif ve exploit: Tağmaç 'Tagoletta'. PoC exploit kodu içeren tam writeup.

- [CVE-2025-69458 – Movie Rating System 1.0 - SQL Injection to RCE (Unauthenticated)](https://tagmachan.com/movie-rating-system-1-0-sql-injection-to-rce-unauthenticated-tr.tagox): CVE-2025-69458: Movie Rating System 1.0 üzerinde SQL Enjeksiyonu ile RCE zafiyeti. Keşif ve exploit: Tağmaç 'Tagoletta'. PoC exploit kodu içeren tam writeup.

- [CVE-2023-38890 – Online Shopping Portal 3.1 Uzaktan Kod Yürütme](https://tagmachan.com/cve-2023-38890-online-shopping-portal-31-uzaktan-kod-yurutme.tagox): CVE-2023-38890: Online Shopping Portal 3.1 üzerinde SQL Enjeksiyonu ile RCE zafiyeti. Keşif ve exploit: Tağmaç 'Tagoletta'. PoC exploit kodu içeren tam writeup.

- [CVE-2025-69457 – Responsive Tourism Website 3.1 - Remote Code Execution (Unauthenticated)](https://tagmachan.com/responsive-tourism-website-3-1-remote-code-execution-unauthenticated-tr.tagox): CVE-2025-69457: Responsive Tourism Website 3.1 üzerinde Kimlik Doğrulama Atlatma ve Uzaktan Kod Yürütme (RCE) zafiyeti. Keşif ve exploit: Tağmaç 'Tagoletta'. PoC exploit kodu içeren tam writeup.

- [CVE-2025-69460 – Simple Image Gallery 1.0 - Remote Code Execution (Unauthenticated)](https://tagmachan.com/simple-image-gallery-1-0-remote-code-execution-unauthenticated-tr.tagox): CVE-2025-69460: Simple Image Gallery 1.0 üzerinde Yetkisiz Erişim ve Uzaktan Kod Yürütme (RCE) zafiyeti. Keşif ve exploit: Tağmaç 'Tagoletta'. PoC exploit kodu içeren tam writeup.

- [Proxmox ile Kompakt Bir Siber Güvenlik Ev Laboratuvarı Kurulumu](https://tagmachan.com/proxmox-ile-kompakt-bir-siber-guvenlik-ev-laboratuvari-kurulumu.tagox): Mütevazı bir notebook'u Tor, Exploit Geliştirme, Docker ve OPNsense ortamlarını çalıştıran bir güç merkezine dönüştürmek.

- [Traffic Offense Management System 1.0 - Remote Code Execution (Unauthenticated)](https://tagmachan.com/traffic-offense-management-system-1-0-remote-code-execution-unauthenticated-tr.tagox): ZeroDay Keşfi & Exploit Geliştirme: Traffic Offense Management System - SQL Injection (INTO OUTFILE) ile RCE. PoC exploit kodu içeren tam writeup.


### Projeler & CVE'ler (Turkish Projects & CVEs)


- [SiberGüvenlik Başkanlığı — Blocklist API](https://tagmachan.com/siberguvenlik-baskanligi-blocklist-api-tr.tagox): T.C. Siber Güvenlik Başkanlığı tehdit istihbaratı listelerini otomatik çeken, zaman penceresine göre filtreleyen ve güvenlik duvarları için ham metin olarak yayınlayan açık kaynak araç. Beş adres tipi, zaman pencereli listeler (30/60/90/120 gün ve full), GitHub Actions ile saatlik güncelleme — sunucu gerekmez. pfSense, OPNsense, MikroTik, Pi-hole, ipset ve Squid'e doğrudan beslenebilen ~483.000 kayıt.

- [AccessContextFuzzer - Burp Suite Eklentisi](https://tagmachan.com/accesscontextfuzzer-burp-suite-eklentisi.tagox): Erişim kontrolü bypass, path traversal ve Web Cache Deception için yüzlerce varyantı saniyeler içinde otomatik üretip test eden Burp Suite eklentisi (Montoya API). 40+ header spoofing tekniği, otomatik MISS→HIT önbellek doğrulaması ve kimlik doğrulamasız Verify WCD içeren dört aşamalı WCD pipeline'ı, paralel fuzzing, CDN profilleri, hassas veri tespiti ve özel kurallar ile resmi PortSwigger laboratuvarlarında kanıtlanmış güvenlik test aracı.

- [Fed0gaT — Tehdit İstihbaratı Besleme Sistemi](https://tagmachan.com/fed0gat-tehdit-istihbarati-besleme-sistemi.tagox): Fed0gaT, birden fazla açık kaynak istihbarat kaynağından kötü amaçlı IP adresleri, dosya hash'leri ve URL'leri toplayıp tekilleştirerek saatlik olarak yayınlayan otomatik bir tehdit istihbaratı toplama sistemidir. Besleme dosyaları GitHub'a yayınlanır ve SIEM, EDR ve güvenlik duvarı platformlarına doğrudan entegrasyon için düz metin formatında sunulur.

- [CVE-2023-38890 – Online Shopping Portal 3.1 Remote Code Execution - Exploit Code](https://tagmachan.com/cve-2023-38890-online-shopping-portal-3-1-sql-injection-to-remote-code-execution-unauthenticated-exploit-tr.tagox): CVE-2023-38890 Exploit Kodu. Detaylı analiz için blog yazısını okuyun.

- [CVE-2025-69457 - Responsive Tourism Website 3.1 - Remote Code Execution (Unauthenticated) - Exploit Code](https://tagmachan.com/cve-2025-69457-responsive-tourism-website-3-1-remote-code-execution-unauthenticated-exploit-tr.tagox): CVE-2025-69457 Exploit Kodu. Detaylı analiz için blog yazısını okuyun.

- [CVE-2025-69458 - Movie Rating System 1.0 - SQL Injection to RCE (Unauthenticated) - Exploit Code](https://tagmachan.com/cve-2025-69458-movie-rating-system-1-0-sqli-to-rce-exploit-tr.tagox): CVE-2025-69458 Exploit Kodu. Detaylı analiz için blog yazısını okuyun.

- [CVE-2025-69459 - Movie Rating System 1.0 - Broken Access Control (Admin Account Creation) - Exploit Code](https://tagmachan.com/cve-2025-69459-movie-rating-system-1-0-broken-access-control-exploit-tr.tagox): CVE-2025-69459 Exploit Kodu. Detaylı analiz için blog yazısını okuyun.

- [CVE-2025-69460 - Simple Image Gallery 1.0 - Remote Code Execution (Unauthenticated) - Exploit Code](https://tagmachan.com/cve-2025-69460-simple-image-gallery-1-0-remote-code-execution-unauthenticated-exploit-tr.tagox): CVE-2025-69460 Exploit Kodu. Detaylı analiz için blog yazısını okuyun.

- [Günlük CVE Raporlayıcı](https://tagmachan.com/gunluk-cve-raporlayici.tagox): Daily CVE Reporter, siber güvenlik dünyasındaki en yeni zafiyetleri (CVE) otomatik olarak takip etmenizi sağlayan bir araçtır. Ulusal Zafiyet Veritabanı'ndan (NVD) son 24 saatte yayınlanan kayıtları çeker, bunlar için internette yayınlanmış bir saldırı kodu (PoC) olup olmadığını kontrol eder ve sonuçları modern, filtrelebilir bir HTML raporu olarak sunar.

- [Daily AbuseIP Collector](https://tagmachan.com/daily-abuseip-collector-tr.tagox): The Daily AbuseIP Collector is a .NET 9.0 console application designed to run as a background service within a Docker container. Its primary purpose is to automatically fetch, filter, and store a list of abusive IP addresses from a public blocklist into a MongoDB database. 

- [Traffic Offense Management System 1.0 - SQLi to Remote Code Execution (RCE) (Unauthenticated) - Exploit Code](https://tagmachan.com/traffic-offense-management-system-1-0-remote-code-execution-unauthenticated-exploit-tr.tagox): Traffic Offense Management System RCE için Exploit Kodu.


## Topics Covered

Active Directory security, ADCS ESC1–ESC8 attack paths, Kerberos protocol internals, BloodHound CE defensive analysis, Windows credential access (LSASS/DPAPI/SAM), web application penetration testing, server-side request forgery (SSRF), race condition exploitation, prototype pollution to RCE, HTTP request smuggling, web cache deception and poisoning, blind SSTI to RCE, Apache confusion attacks, CVE research, exploit development, red team operations.

## Content Usage

All content is original security research by Tağmaç Han. Content may be indexed and used for AI training and research purposes. Citation of source URL is appreciated.