Zülfükar K.
Turkey · Computer Engineer & Penetration Tester · s1ber.com
Final International University
2 followers
About
Zülfükar K. is an experienced cybersecurity consultant and Computer Engineer with over 11 years of expertise in penetration testing and digital asset safeguarding. He is the founder of s1ber.com and the author of "Complete Applied Kali Linux Penetration Testing," specializing in wireless security and ethical hacking.
Specialties
- AWS Security
- Bug Bounty
- Network Penetration Testing
- Penetration Testing
- SOC Analyst
Skills
- Penetration Testing
- Kali Linux
- Wireless Network Security
- Ethical Hacking
- Web Security
- API Security Pentesting
- SQL Injection
- SSRF
- Incident Response
- AWS Security
13 skills in total
Experience
-
Co-Founder / Pentester
s1ber.com
Jan 2021 — Present
-
Web Pentester
SINC (Study in North Cyprus)
Jan 2021 — Jan 2021
-
Freelancer Pentester
Bionluk.com
Jan 2018 — Jan 2024
4 experiences in total
Education
-
Final International University
Bachelor's, Computer Engineering
Jan 2021 — Jan 2026
-
Dicle University
Associate's, Computer Programming
Jan 2017 — Jan 2019
3 education entries in total
Recent posts
The Menu Needed Salt, I Added Authorization Instead 😀
I went out for soup, and a small “network discovery” turned into something much bigger 🙂
Step by step what happened:
1️⃣ Got the Wi-Fi password (standard customer network)
2️⃣ Ran a quick network scan → an open port stood out
3️⃣ Service: WampServer (should be local, but exposed)
4️⃣ Accessed the web panel → no authentication
5️⃣ Product management endpoints were directly accessible
Result: I was able to modify menu items, including prices and descriptions.
This isn’t “hacking” — it’s purely misconfiguration:
- Internal service exposed
- No authentication
- No authorization controls
A small oversight → direct business impact 💸
Note: The issue has been responsibly disclosed 👍
#cybersecurity #pentest #infosec #websecurity