ozgun kultekin

i break software, then i write tools so other people can break it too. offensive security, application security, and whatever ai is doing to both.

talks

2026black hat usa arsenalunrelabel: how to destroy an ml model 2026def con 34 demo labsaobtd: ai one bites the dast 2026def con 34 ai villageagent-to-agent worm propagation in mcp-based ai systems 2025def con 33 recon villageenumeraite: ai assisted web attack surface enumeration video 2024def con 32 red team villagethe siemless hack: rewriting reality with log injection 2023–24bsides prague, hacktivity, bsides satx, bsides tiranasiem slam: tricking modern siems with fake logs

work

enumeraiteai-assisted web attack surface enumeration. code aobtdllm-driven dast. looks at the app before it bites. code unrelabelpoison a classifier, keep accuracy green. code log-slapperinject fake logs into splunk. hide in the noise. code