Mert Sunar Security Lab
Hands-on technical write-ups, vulnerability mechanics, sandboxed AI injection defenses, and kernel telemetry.
[!] RESPONSIBLE RESEARCH NOTICE:
All methodologies, logs, and simulations are executed inside isolated sandbox containers and ethical testing environments. No live exploitation data against third-party production targets is disclosed.
DevSecOps
RISK: HIGH
Zero Trust eBPF Kernel Observability & Hardening Lab
Detect evasive rootkits, in-memory execution, and unauthorized kernel syscalls using real-time eBPF runtime observability.
TOOLS UTILIZED:
Tetragon
BCC Tools
Auditd
Sysdig
bpftrace
Web Security
RISK: HIGH
Modern REST API Broken Object Level Authorization (BOLA/IDOR) Analysis
Identify authorization flaws and IDOR vulnerabilities in financial API endpoints and implement zero-trust attribute-based access control (ABAC).
TOOLS UTILIZED:
Postman
OWASP ZAP
Burp Suite Pro
K6
AI Security
RISK: CRITICAL
LLM Prompt Injection & System Firewall Defense Lab
Analyze indirect prompt injection and system prompt leak vectors in enterprise LLM deployments and develop layered boundary defense mechanisms.
TOOLS UTILIZED:
Burp Suite
Python
LangChain
Rebuff
Custom Fuzzing Scripts