I research security vulnerabilities in Linux systems and open-source software, with a focus on root cause analysis, privilege boundaries, and responsible disclosure.
1st Place - TEKNOFEST 2026 Pardus Bug Hunting & Improvement Competition
Cyber Security & Software Team Captain at ThinkTank
My work focuses on finding, understanding, and documenting security issues in real-world Linux and open-source software.
I also build software around the problems I investigate, turning research into practical tools rather than isolated proof-of-concepts.
I conduct security research across components of the Pardus & ETAP ecosystem, focusing on privilege boundaries, privileged services, authorization mechanisms, and unsafe external input handling.
Research will be published progressively and only when disclosure permits. Probably after a very long time.
| Project | Description |
|---|---|
| Advisory-RSS | Local security advisory aggregator combining GitHub Security Advisories and CERT-TR notifications into an RSS feed. |
| CopySec | Windows clipboard security research tool focused on clipboard ownership, delayed rendering, process boundaries, and race conditions. |
| ahenk-debug | Diagnostic CLI for Pardus ETAP / LiderAhenk environments, covering identity, services, broker connectivity, ETA API validation, and network diagnostics. |
| linux-autoruns | Linux persistence and autostart enumeration across systemd, cron, PAM, udev, D-Bus, GRUB, and other mechanisms. |
| Storefront-Research | Research tooling for analyzing modern web storefront architectures, client-side state, APIs, and GraphQL-based systems. |
| Walkie | Encrypted LAN voice communication application built around low-latency audio transport. |
As the Cyber Security & Software Team Captain of ThinkTank, I led the team to 1st place in the Pardus Bug Hunting & Improvement Competition at TEKNOFEST 2026.
Our work focused on identifying and analyzing security issues in the Pardus ecosystem and reporting them through responsible disclosure practices.
View the official TEKNOFEST announcement
I report security vulnerabilities through appropriate vendor and authority channels and avoid publishing sensitive exploitation details before disclosure is appropriate.
My research process is centered around:
Root Cause - Impact - Reproduction - Remediation - Disclosure
Security
├── Vulnerability Research
├── Linux Security
├── Authentication / Authorization
├── Privilege Boundaries
└── Responsible Disclosure
Systems
├── Linux
├── systemd
├── PolicyKit
├── SUID / Privileged Services
└── Endpoint Software
Development
├── Python
├── Bash
└── Linux Tooling
---
Contact
Personal Website: lunixizm.website
GitHub: @Lunixizm0
Email: github@lunixizm.website