k074m4n

STATUS: OPERATIONAL

k074m4n

Security Researcher

Computer Engineering student at Yıldız Technical University and a working cybersecurity engineer. I defend ~4,000 users and ~6,000 devices by day and break things by night. Early in my career and learning constantly, with most of my attention lately on AI and LLM security.

▸ PROJECTS▸ SECURE CHANNEL

CYBERDECK STATUS

▸ RUN BREACH PROTOCOL

[01]

Hacking Projects

2 RECORDS INDEXED

Select a record to decrypt the full write-up.

QH-001 // Agentic AI

CODEBASE Q&A AGENT

PERIOD
2025 — 2026
CLASS
Agentic AI
TIER
epic

An agentic AI that reads and reasons across a whole codebase to answer deep technical and logical questions about it.

Getting up to speed on an unfamiliar codebase is slow. The questions that actually matter are not keyword lookups. You want to know where something is handled, why a piece of logic exists and how data moves between modules. A plain retrieval chatbot cannot answer that. It has to navigate the code and reason about it.

I put a configurable LLM at the core of the architecture so the model stays a swappable component, then built the agent orchestration around it. The agent walks the repository, pulls the relevant code in as context and reasons over it to give grounded answers instead of surface matches.

Most of the engineering went into that orchestration. The agent plans how to approach each question, uses tools to move through the code, collects the right context and writes an answer that points back to the source. The model sits at the core as a swappable part. You can change it without reworking anything around it.

Answers deep technical and logical questions across a codebase it has never seen before.

STACK

  • Python
  • LLMs
  • Agent Orchestration
  • RAG

QH-002 // Computer Vision / ML

THERMAL HUMAN DETECTION

PERIOD
2024 — 2025
CLASS
Computer Vision / ML
TIER
rare

Designed and trained two detection models, one YOLO-based and one Transformer-based, to find people in thermal images.

Finding people in thermal images is a different problem from normal object detection. There is no colour or fine texture to work with, just heat against a noisy background. That is what makes it useful where a normal camera gives up: low light, smoke, search and rescue, perimeter work. It also forces the model to lean on shape and heat contrast alone.

I built and trained two separate pipelines on thermal datasets. One is a YOLO single-stage detector tuned for speed. The other is a Transformer-based detector I used for comparison. Both needed thermal-specific prep first: single-channel normalisation and augmentation meant for heat data rather than RGB.

Putting the two side by side on the same data made the trade-offs clear: single-stage convolution against attention, accuracy against inference cost and the frames where each one falls apart. I came out of it with a direct read on how two modern detection architectures behave on data that hides most of the cues they were built for.

Two detector families (YOLO and Transformer) trained and compared on thermal data.

STACK

  • Python
  • PyTorch
  • YOLO
  • Transformers
  • OpenCV
[02]

Certifications

2 IN PROGRESS

SKILLS

  • AGENTIC AI

    Building and driving LLM agents; using agentic tooling to move faster on real work.

  • GADGETING

    Custom offensive hardware and drop devices; RFID / NFC and RF access tooling.

  • OSINT

    Passive recon and attack-surface mapping from open sources.

  • TECHNICAL WRITING

    Turning findings into clear reports and docs people actually act on.

  • TRAINING & SPEAKING

    Breaking security down for non-technical audiences; ran courses at Terra Academy.

SECURITY FUNDAMENTALS // IN PROGRESS

CompTIA Security+

CODE
SEC+
ISSUER
CompTIA

Vendor-neutral baseline across threats, cryptography, identity, network security and host security. It is the DoD 8570 baseline certification.

NOT EARNED YET

Currently studying for this one. The certificate appears here once it is earned.

NETWORK FUNDAMENTALS // IN PROGRESS

CompTIA Network+

CODE
NET+
ISSUER
CompTIA

Networking fundamentals: topologies, routing and switching, protocols and the network-layer security that offensive and defensive work both rest on.

NOT EARNED YET

Currently studying for this one. The certificate appears here once it is earned.

HTB ACADEMY // ACHIEVEMENTS

Badges

  • First things first badge

    First things first

    For completing the Operating System Fundamentals path

    3 Sep 20260.42% of users

[03]

Personnel Dossier

CLASSIFICATION: PUBLIC

SUBJECT

Yiğit Kotaman

Security Researcher · İstanbul, TR

▸ EXPERIENCE

  1. JUN 2024 — PRESENT

    Cybersecurity Engineer

    SANKO Holding · SANShine

    • Operate Microsoft Defender XDR and CyberForce threat intelligence, securing ~4,000 users and ~6,000 devices.
    • Designed an automation that auto-evaluates incoming alerts and generates dynamic blocklists, cutting manual triage and speeding response.
    • Configure and maintain WAF rules filtering malicious traffic against web applications.
    • Triage ~100 daily alerts across network and endpoint layers; investigate and escalate confirmed incidents.
    • Run security-awareness training and phishing simulations; support ISO 27001 compliance activities.
  2. APR 2024 — JUL 2024

    Cybersecurity Trainer

    Terra Academy

    • Delivered introductory cybersecurity courses covering core security concepts and fundamentals.
    • Certified as a trainer through a European Commission train-the-trainer program.
  3. NOV 2023 — JUN 2024

    SKY-SEC Team Member

    YTÜ SKYLAB Club

    • Competed in national CTFs: binary exploitation (pwn), reverse engineering, low-level exploits, OSINT and social engineering.
    • Co-organised a CTF and helped run one of Turkey's largest cybersecurity summits.

▸ EDUCATION

  1. EXPECTED JUN 2027

    B.Sc. Computer Engineering

    Yıldız Technical University · İstanbul

    • GPA 3.82 / 4.0.
    • Operating Systems · Data Structures & Algorithms · Assembly · Database Systems.
  2. JAN 2026 — JUN 2026

    Cybersecurity Engineering — Erasmus+

    Linnaeus University · Växjö, Sweden

    • Computer Networks · Internet Security · Information Security in Organizations · Computer Security.
  3. 2017 — 2021

    Science High School

    Mediha-Hayri Çelik · Bursa

    • Graduated 95.95 / 100.
[04]

Data Shards

2 SHARDS
[05]

Secure Channel

AES-256-GCM // E2E

▸ PRIMARY UPLINK

kotaman_business@hotmail.com

For business contact, security work or responsible disclosure only.

▸ SEND MESSAGE

ALTERNATE NODES

[EGG]

Breach Protocol

OPTIONAL // PLAYABLE

Pick cells from the matrix in turn to write the target sequences into the buffer. The first pick runs along a row, after that the axis alternates between column and row. The clock starts on your first selection.

BREACH TIME REMAINING--:--

CODE MATRIX

BUFFER 0/7

SEQUENCE REQUIRED TO UPLOAD

    ▸ STANDING BY