Emre Koca
Computer Engineering student breaking into things on purpose — Active Directory, lateral movement, privilege escalation. I build open-source security tooling and disclose CVEs.
I'm a Computer Engineering student at Istanbul Kültür University, OSCP+ certified and focused on offensive security.
I picked up hands-on penetration testing during an internship at Turkish Ground Services (TGS), with a strong focus on Active Directory exploitation, lateral movement, privilege escalation and pivoting.
I build open-source security tooling — recon-deck and ZeGuard — and publish technical research on LLM security and recent CVEs. So far I've responsibly disclosed vulnerabilities resulting in 5 assigned CVEs.
Turns nmap output or an AutoRecon zip into a port-aware recon checklist — pre-filled commands, HackTricks links and per-service tasks — in under 30 seconds. Offline, single Docker image, no telemetry.
Browser-based, open-source scanner that detects hidden prompt-injection payloads buried inside PDF, DOCX and PPTX files — before they ever reach your LLM pipeline.
Self-contained, kill-chain-organized OSCP toolkit. Serves ~60 offensive tools over HTTP from your Kali box for one-liner delivery — enum, AD attack, token abuse, pivoting, AMSI bypass, msfvenom payloads.
A reflex game about AI-agent safety. Approve or deny the shell commands an agent suggests before the timer runs out — some are routine, some wipe your machine or exfiltrate your secrets.
Vulnerabilities I've discovered and responsibly disclosed. AI accelerates the source review — every finding is verified by hand in a local lab.