I'm Erkan Kavas — cybersecurity analyst, bug hunter, and DevSecOps builder. This is where I publish write-ups on recon, red team ops, appsec tooling, and the security engineering behind the things I ship.
Fawn is a very easy Linux machine which explores the File Transfer Protocol (FTP) and its exploitation when misconfigured to allow anonymous access.
Meow is a very easy Linux machine which guides players on setting up their attacking machines, connecting to HTB labs via VPN and demonstrates the strategy of how to complete them. The machine focuses on beginner enumeration techniques and showcases the exploitation of a vulnerable Telnet service through default credentials.
Artificial intelligence (AI) is rapidly becoming an important part of almost every area of technology. AI is already being used in cybersecurity to write software, analyze data, detect threats, automate business processes, operate autonomous systems, and assist teams.
After a long time away, I honestly hadn't seriously considered coming back to blogging from my own website. But Medium's recent policy changes — constantly favoring certain viewpoints, imposing pointless restrictions, and running into forms of censorship — pushed me to reconsider. Since we've had our own domain for over 20 years, I figured: why not come back here.