Ali Can Gönüllü alicangnll

💫 About Me:

I have been trying to specialize in Cyber Security since 2015.

In 2018, I was first awarded the "Hall of Fame" award by Intel because I found a Stored XSS vulnerability on the website.
In 2019, RCE vulnerability I found in Roxy Fileman 1.4.5 software was included in the CVE MITRE system with the code "CVE-2019-7174".
In 2019, the Cross Site Request Forgery vulnerability I found in version 1.0.0.12 of the AirTies Air 5341 router model was included in the CVE MITRE system with the code "CVE-2019-6967".
In 2019, the Cross Site Request Forgery vulnerability I found in version 1.00 (AAXM.6)C0 of the Zyxel NBG-418N v2 router model was included in the CVE MITRE system with the code "CVE-2019-6710".
In 2022, the Cross Site Scripting vulnerability I found in the Metro UI software was included in the CVE MITRE system with the code "CVE-2022-41376"
In 2022, I found a Stored XSS vulnerability in the "0.3.7" version of the "Crontab" module of the pfSense Firewall software, and I reported it to Netgate and helped solve the problem.
In 2022, I also found various vulnerabilities in Bosch company and RMIT University, but unfortunately these vulnerabilities were considered "Informal".
In 2023, I was included in the "Hall of Fame" list due to the vulnerability I found on the Cisco company's website.

In 2021, I started working as a Cyber Security Specialist at Defans Security. Within the company,

Web Penetration Tests (PHP, Python, JavaScript, ASP.NET etc.),
LAN and WAN Network Penetration Tests (Servers, Storages, Firewalls, Switches, Virtual Machines, etc.),
Cloud Penetration Tests (AWS and Azure),
For the SOC team with EDR / XDR configurations,
IDS / IPS configurations of Sophos, Fortigate and pfSense firewall devices and software,
Wazuh SIEM installation
Wazuh SIEM configurations
Wazuh SIEM rule writing and updating the rules.
Splunk SIEM installation
Splunk SIEM configurations
Splunk SIEM rule writing and updating the rules.

Never considering myself sufficient, I continue my path of learning in the light of my past experiences.

Webinar, How Devices Turned Into Explosives? Were the Explosions in Lebanon a Cyber Attack?, Gokce Gulculer's Stream (18.09.2024, Link)
Webinar, How Should We Start a Cyber Security Career?, TOBB ETU University, Cyber Security Community (02.11.2024, Link)