System engineer and Solution Architect for a high-traffic e-learning platform serving 15k daily visitors. Re-architected existing projects into a highly available, distributed architecture — load balancing, clustered databases, and Proxmox-based virtualization — to handle peak load. Delivered open-source solutions, built DevSecOps pipelines for internal projects, and developed AI-powered software.
Hi, I'm Serhat Sönmez
Solution Architect
Software · Infrastructure · DevSecOps · Security
I'm an Solution Architect with 13+ years of experience across the full IT stack — software, systems, DevSecOps, and security.
I help organizations solve real problems: designing the right architecture, building custom software where off-the-shelf tools don't fit, recommending and deploying open-source solutions, and setting up the DevSecOps, systems, and security infrastructure that keeps everything running.
I've built and led several companies as a founder and team lead. Today I partner with organizations as a technical lead and consultant, turning business goals into reliable, measurable technical outcomes.
[~/about/Areas of Expertise]
[~/about/Find Me]
[ ~/Skills ]
[~/skills/Soft Skills]
Resolves issues thoroughly with strong algorithmic and systems thinking.
Always exploring new technologies and keeping pace with industry advancements.
Making informed trade-offs under uncertainty and constraints.
Structured, efficient delivery through Agile methodologies.
Translating complex technical concepts for stakeholders, teams, and learners.
Aligning business, product, and engineering around clear goals.
Comfortable taking on new challenges and shifting environments.
Developing teams and sharing expertise through hands-on guidance.
[~/skills/Technical Skills]
Software architecture & full-stack development in Python, C#, and .NET Core — API design, database modeling, and scalable/optimized production systems.
Full Linux administration: users & permissions, packages, network configuration, disks (LVM/RAID/ZFS), storage, backups, and troubleshooting.
Security-first engineering and pentesting: hardening, firewalls, vulnerability assessment, OWASP web security, cryptography, and threat intelligence.
Network administration: TCP/IP, DNS, DHCP, firewalls, load balancing, VPNs, VLANs, and troubleshooting.
Containerized infrastructure and CI/CD pipelines with security-first automation — Docker, Kubernetes, and GitOps workflows.
Designing scalable, secure systems through technology selection, trade-off analysis, and architecture decision records.
Evaluating, deploying, and maintaining open-source alternatives — 100+ solutions deployed and supported across industries.
Architecture decision records, runbooks, and technical documentation that keep teams aligned and systems maintainable.
[~/skills/Stack]
[~/skills/Open Source]
As an Solution Architect, solving real problems with open-source is what I do best: 100+ different open-source applications deployed and supported, matched to each client's requirements.
[ ~/Career ]
[~/career/Companies]
Developing ERP systems end-to-end — owning every step from software development and CI/CD pipelines to server infrastructure and production delivery. Managing Linux servers, delivering open-source solutions, and applying DevSecOps optimizations across the ERP platform.
Freelance Solution Architect delivering end-to-end solutions for complex server and software challenges across industries. Deploying and optimizing open-source tools, configuring secure high-performance Linux systems, and integrating custom features to meet diverse client needs.
Leading the design and development of Cyberthint, a unified cyber threat intelligence (CTI) platform built on a microservices architecture with 30+ services. Owning both the software and delivery sides — CI/CD pipelines and server infrastructure — across threat intelligence, vulnerability management, and brand protection.
Developing Web3 software for a cooperative learning platform covering STEM & Arts, with a focus on crypto payments and blockchain integration. Building 3D metaverse features and the OnWeb3-Passport NFT for educational access and community events. Managing servers and DevSecOps processes on Proxmox-virtualized Linux infrastructure.
Co-founded a subscription-based marketplace for 3D model designers. Led system architecture, Stripe payment integration, and AWS-based scaling (EC2, S3) to deliver a high-performance, secure platform for the creative community.
Co-founded a dropshipping e-commerce platform for the 3D production sector. Led system design and feature development, optimizing performance and ensuring secure, scalable solutions for a seamless user experience.
Delivered software development training in C#, ASP.NET, and Python. Designed hands-on courses and practical materials to equip students with industry-relevant skills for desktop and web applications.
Built defensive security tooling on the Cyber Security Team, using AlienVault SIEM as the primary platform. Developed plugins for Netsparker, Nessus, and Acunetix, plus OSINT platforms, to strengthen enterprise cybersecurity.
Developed web-based solutions for enterprise clients including Coca-Cola, Akel Lojistik, and Plan Teknik. Focused on back-end development, architecting secure, scalable systems and providing ongoing support across industries.
Founded a collaborative IT venture delivering tailored software solutions across industries. Developed secure, high-performance applications and built strategic partnerships with other IT experts.
[~/career/Education]
BBA, Management Information Systems
BE, Electronics and Communications Engineering
AD, Medical Imaging Techniques
MBBS, Medical Science
High School
[ ~/Projects ]
[~/projects/Enterprise Projects]
Online exam preparation platform for Turkey's occupational health and safety certification exams — workplace medicine, safety expertise, and other health personnel. Built a 2000+ question bank with topic-based custom practice exams, progress statistics, and a JavaScript SPA exam engine. Includes iyzico Checkout Form and EFT-based licensed packages, Google OAuth, and account lockout, deployed on a Dockerized Django stack with Elasticsearch logging.
Responsibilities
- Project Architect
- Software Developer
- Database Designer
- SysAdmin
- DevSecOps Engineer
- Security Engineer
Tech Stack
- Python
- Django
- PostgreSQL
- ELK Stack
- Gunicorn
- Docker
- GitLab CI/CD
- SonarQube
- Nginx/Let's Encrypt
- Iyzico
- Google OAuth
Security-focused MCP (Model Context Protocol) proxy router that controls what AI agents can access on their MCP servers. Users define upstream MCP servers, whitelist specific tools, prompts, and resources, and connect agents through a single UUID-based proxy link — preventing access to dangerous operations like payments or data deletion. Built on a Django (web) + FastAPI (proxy) hybrid architecture with zero data retention and real-time request logging.
Responsibilities
- Project Architect
- Software Developer
- Database Designer
- SysAdmin
- DevSecOps Engineer
- Security Engineer
Tech Stack
- Python
- Django
- FastAPI
- Tailwind CSS
- DaisyUI
- PostgreSQL
- ELK Stack
- Docker
- GitLab CI/CD
- SonarQube
- Nginx/Let's Encrypt
- Google OAuth
- MCP SDK
Unified Cyber Threat Intelligence (CTI) and digital risk protection (DRP) platform that detects brand impersonation, data leaks, and exposed attack surfaces. Led the software team and designed a Python/Flask microservices architecture spanning 30+ microservices with Celery task queues, deep-web and dark-web monitoring, and threat-feed integrations. Owned database architecture, DevSecOps, and security across PostgreSQL, Redis, Elasticsearch, and Nginx, with AI-assisted malware analysis.
Responsibilities
- Team Lead
- Project Architect
- Software Developer
- Database Designer
- SysAdmin
- DevSecOps Engineer
- Security Engineer
Tech Stack
- Python
- Django
- Flask
- C#/.NET Core
- Celery
- Flower
- Selenium
- PostgreSQL
- PgBouncer
- MSSQL
- Redis
- ELK Stack
- Docker
- GitLab CI/CD
- SonarQube
- Nginx/Let's Encrypt
- 2FA/OTP
- Microservices Design
- Web Scraping & Crawling
- API Integration
- Nmap
- Shodan
- Nuclei
- VirusTotal
- AlienVault
- AI API Integrations
Python/Django-based ERP system that streamlines multi-branch organizational operations — employees, customers, inventory, workforce scheduling, task assignments, reporting, and accounting. Designed the application and database architecture, built the full stack in Django, and managed the entire delivery lifecycle. Includes a PWA with push notifications, two-factor authentication, Sipgate phone/IVR integration, and Elasticsearch-based logging.
Responsibilities
- Project Architect
- Software Developer
- Database Designer
- SysAdmin
- DevSecOps Engineer
- Security Engineer
Tech Stack
- Python
- Django
- PostgreSQL
- ELK Stack
- Docker
- GitLab CI/CD
- SonarQube
- Nginx/Let's Encrypt
- PWA
- 2FA/OTP
- GPS Tracking
- Sipgate IVR
AI-powered tool that converts YouTube videos into professional PowerPoint presentations. Extracts transcripts, segments content with an LLM, generates AI infographic visuals for each section, and packages everything into a speaker-noted .pptx — all through an async pipeline with live SSE progress. Emphasizes AI/LLM integration via OpenRouter with Whisper-based transcription fallback.
Responsibilities
- Project Architect
- Generative AI Developer
- DevSecOps Engineer
Tech Stack
- Python
- FastAPI
- SocketIO
- OpenRouter
- OpenAI Whisper
- yt-dlp
- Python-PPTX
- FFmpeg
- SSE
- JWT
- ELK Stack
- Docker
- Nginx/Let's Encrypt
AI-powered tool that cuts large videos into segments, optimizes quality, transcribes audio with Whisper, and auto-generates multiple-choice questions from the content, then uploads everything to the LMS. Uses OpenAI structured output for question generation and WebSocket (SocketIO) for real-time progress. Emphasizes AI/LLM and speech-to-text integration.
Responsibilities
- Project Architect
- Generative AI Developer
- DevSecOps Engineer
Tech Stack
- Python
- FastAPI
- SocketIO
- OpenRouter
- OpenAI Whisper
- FFmpeg
- PyTorch
- Librosa
- SSE
- JWT
- ELK Stack
- Docker
- Nginx/Let's Encrypt
AI-powered tool that converts PowerPoint presentations into narrated training videos and auto-generated quizzes. Exports slides via PowerPoint COM automation, voices speaker notes with multi-provider TTS (ElevenLabs, Google, Voicemaker), composes videos with FFmpeg, and generates quizzes and module components with OpenRouter — all delivered directly to the LMS. Emphasizes AI/LLM, TTS, and multi-provider API orchestration.
Responsibilities
- Project Architect
- Generative AI Developer
- DevSecOps Engineer
Tech Stack
- Python
- FastAPI
- SocketIO
- OpenRouter
- ElevenLabs
- Google Cloud TTS
- Voicemaker
- Gamma AI
- Netlify
- Python-PPTX
- Pywin32 (PowerPoint COM)
- FFmpeg
- SSE
- JWT
- ELK Stack
- Docker
- Nginx/Let's Encrypt
Web3-powered cooperative learning platform centered on STEM and the Arts. Runs a microservice architecture (Flask, Keycloak SSO, Nginx reverse proxy, NocoDB, Redis) over Docker, operating a Solana-based ecosystem of utility tokens and NFTs — including the "OnWeb3-Passport" — with a social knowledge economy (KICAS) and user Web3 profiles served over custom Handshake (HNS) DNS domains. Also integrates a 3D metaverse dimension.
Responsibilities
- Solution Architect
- Project Architect
- Software Developer
- Blockchain Developer
- Database Designer
- SysAdmin
- DevSecOps Engineer
- Security Engineer
Tech Stack
- Python
- Flask
- PostgreSQL
- MongoDB
- Redis
- Proxmox VE
- Docker
- GitLab CI/CD
- Solana Contracts
- NFTs
- Handshake DNS (HNS/hDNS)
- Keycloak SSO (OIDC)
- Nginx/Let's Encrypt
- Crossmint
- Tailscale VPN
- PDF.js
- PowerDNS
- NocoDB
- EspoCRM
Server and network management project covering the design and hardening of the company's internal infrastructure. Built a Proxmox-based environment with an OPNsense firewall, reverse proxy, DHCP, VLAN segmentation, NAT routing, and internal connectivity, securing company-wide access. Deployed and maintained essential open-source systems — including two password managers, an ERP, and NocoDB — and developed supporting tooling: a 24/7 KNX monitoring stack (Grafana + InfluxDB) and Python utilities for data import, parsing, and a desktop folder-search application.
Responsibilities
- Solution Architect
- Software Developer
- SysAdmin
- DevSecOps Engineer
- Network Architect
- Security Engineer
Tech Stack
- Proxmox VE
- Python
- OPNsense
- WireGuard
- Nginx Proxy Manager
- NAT
- VLAN
- Routing
- NocoDB
- Grafana
- InfluxDB
- Docker
- Hetzner vSwitch
- KNX Automation
- Passbolt
- ERPNext
Subscription-based marketplace for 3D model designers to showcase and monetize their work. Co-founded the product and led system architecture, full-stack development, and database design. Built on ASP.NET Core (.NET 7), designers group models into sellable packages unlocked via Stripe subscriptions, with STL, presupported, and G-Code distribution across Admin, Designer, and Customer areas. Scaled on AWS S3 with Hangfire scheduling, Redis, and Docker.
Responsibilities
- Team Lead
- Project Architect
- Software Developer
- Database Designer
- SysAdmin
- DevOps Engineer
- Security Engineer
Tech Stack
- C#/.NET Core
- PostgreSQL
- MSSQL
- Redis
- Hangfire
- Docker
- AWS S3
- AWS EC2
- Stripe
- Nginx/Let's Encrypt
On-demand 3D production network offering part manufacturing via FDM, SLA, MJF, and SLS technologies. Co-founded the platform and led the team through architecture, full-stack development, and DevOps. Built an instant STL pricing engine computed from AstroPrint slicing volume data, coordinated a network of 30+ production partners, and integrated iyzico payments.
Responsibilities
- Team Lead
- Project Architect
- Software Developer
- Database Designer
- SysAdmin
- DevOps Engineer
- Security Engineer
Tech Stack
- C#/.NET Core
- PostgreSQL
- MSSQL
- Redis
- Hangfire
- Docker
- Nginx/Let's Encrypt
- AWS S3
- AWS EC2
- Iyzico
- Paraşüt
- MailChimp
- Kirby CMS
- STL File Analysis
Department-based CRM/ERP panel for Sima Cephe Co. managing customers, projects, materials, depots, files, and notes. Designed the architecture and developed lead tracking, task assignment, and communication tools across separate areas for Quote, Project, Procurement, Accounting, Warehouse, Factory, and Construction Site. Managed server deployment and security.
Responsibilities
- Project Architect
- Software Developer
- Database Designer
- SysAdmin
Tech Stack
- C#/.NET Core
- MSSQL
- Docker
- Nginx/Let's Encrypt
Multi-tenant web application for health-sector companies to manage tenders, project costing, profit-loss, cash flow, personnel accounts, and automated due-date calculations. Developed the architecture and full stack, including expense management, depreciation calculations, and Excel-based reporting. Handled deployment and security for reliable internal use.
Responsibilities
- Project Architect
- Software Developer
- Database Designer
- SysAdmin
Tech Stack
- C#/ASP.NET Framework
- MSSQL
- NPOI
- IIS
Fleet tracking application for cooling-solution provider Polat Teknik, monitoring cooling units from dispatch to delivery. Each product's QR code is scanned on vehicle loading, updating the system in real time, with delivery personnel uploading photos to confirm receipt. Built full-stack with GPS tracking and mobile integration, plus employee task oversight.
Responsibilities
- Project Architect
- Software Developer
- Database Designer
- SysAdmin
Tech Stack
- C#/ASP.NET Framework
- MSSQL
- IIS
- GPS Tracking
- Mobile API Gateway
Minimal, ad-free URL shortening service that turns long URLs into compact, shareable links. Designed the architecture and developed the full stack, including user accounts and per-link statistics. Deployed and managed the service on DigitalOcean.
Responsibilities
- Project Architect
- Software Developer
- Database Designer
- SysAdmin
Tech Stack
- C#/ASP.NET Framework
- MSSQL
- IIS
- DigitalOcean
- Link Statistics
Fleet monitoring and reporting platform for a logistics company. Integrated GPS tracking for real-time vehicle locations and routes, plus QR-code scanning of loaded products to track item-to-vehicle assignment. Developed full-stack and made it accessible from both web and mobile.
Responsibilities
- Project Architect
- Software Developer
- Database Designer
- SysAdmin
Tech Stack
- C#/ASP.NET Framework
- MSSQL
- IIS
- GPS Tracking
- Mobile API Gateway
Marketplace connecting customers with local service providers across categories such as cleaning, repairs, and event planning. Users submit service requests and receive offers, comparing prices and reviews before deciding. Built full-stack with Iyzico payment integration and real-time user chat.
Responsibilities
- Project Architect
- Software Developer
- Database Designer
- SysAdmin
Tech Stack
- C#/ASP.NET Framework
- MSSQL
- IIS
- Iyzico
- Realtime Chat
Vending machines for car-drying towels and similar products, placed in car washes and gas stations. Designed and developed the web platform supporting the vending operation, with a focus on security and a clean, user-friendly purchase experience.
Responsibilities
- Project Architect
- Software Developer
- Database Designer
- SysAdmin
Tech Stack
- PHP
- MySQL
- Nginx/Let's Encrypt
[~/projects/Side Projects]
Patreon Assistant
Chrome extension tracking the latest posts from Patreon creators.
- JavaScript
- Chrome Extension
Turtle
Instagram photo downloader.
- Python
- Web
Docker Version Parser
Tool to parse and manage Docker image version tags.
- Python
- CLI
Rabbitgram
Fast Instagram scraper for account info and media download.
- Python
- Docker
- Web
Raccoon
Downloads complete HTML pages including assets, for saving single-page themes.
- Python
- CLI
- Web
Tardigrade
URL crawling and subdomain discovery with IP resolution.
- Python
- Docker
- Web
Password Generator
Chrome extension for generating configurable random passwords.
- JavaScript
- Chrome Extension
Covid-19 Statistics
Browser extension for real-time COVID-19 statistics.
- JavaScript
- Chrome Extension
Cura Engine Env
Docker environment for running the CuraEngine 3D slicing software.
- C++
- Shell
- Docker
Clockify Widget
Notion widget integrating Clockify time tracking into pages.
- JavaScript
- Notion Extension
Coin Status
Real-time cryptocurrency tracking tool with prices and market trends.
- Python
- CLI
Diffie-Hellman Math
Script demonstrating the math behind Diffie-Hellman key exchange.
- Python
RSA Math
Script demonstrating the math behind RSA encryption.
- Python
[ ~/Courses ]
I provide training in web infrastructure, programming, cybersecurity, and system administration. Each course is prepared with a focus on hands-on, practical learning, and the content progresses step by step, from fundamentals to more advanced topics.
Fundamentals of Web Infrastructure
This course explains how the internet and the web actually work, covering the core mechanisms behind them — from network infrastructure and protocols to encryption and modern development processes. The content is structured to provide a solid foundation for anyone working in web development and IT.
PrerequisitesThere are no prerequisites for this training.
Topics- Introduction to Internet Fundamentals
- What is the Internet and How Does it Work?
- What is the Web?
- History and Evolution of the Internet and Web
- Physical Infrastructure of the Internet
- Protocols and Their Importance
- Who Determines Protocols?
- Compliance of Browsers and Applications with Protocols
- Core Concepts of the Internet
- IP (Internet Protocol) and IP Address
- IPv4 - IPv6
- Private and Public IPv4
- IP Range
- IP Subnet and CIDR (Classless Inter-Domain Routing)
- Port
- Gateway
- ARP (Address Resolution Protocol)
- DHCP (Dynamic Host Configuration Protocol)
- MAC (Media Access Control) Address
- WAN (Wide Area Network)
- LAN (Local Area Network)
- NAT (Network Address Translation)
- Network Infrastructure and Communication Basics
- OSI Model
- TCP/IP Model
- Differences Between UDP and TCP
- TCP Segment Structure
- TCP 3-Way Handshake (SYN, SYN-ACK, ACK)
- What are TLS and SSL?
- TLS/SSL Handshake
- Validation Process of SSL/TLS Certificates
- Packet Analysis with Wireshark and tcpdump
- Network Management and Diagnostic Tools
- NAT and IP Management (Private, Public)
- Network Interfaces
- Types of Firewalls
- Firewall Types Based on Operational Levels
- Firewall Types Based on Architecture
- Specialized Firewall Types Based on Purpose
- Ping and ICMP
- DNS Query Analysis with Host
- DNS Query Analysis with Dig
- Route Tracing with Traceroute/Tracert
- Network and Port Scanning with Nmap
- Listing Open Ports with Netstat
- TCP/UDP Connection Testing with Telnet and Netcat
- Network Performance Analysis with iPerf
- Cryptography and Encryption Mechanisms
- Hashing
- Symmetric Encryption
- Asymmetric Encryption
- RSA and Diffie-Hellman Algorithms
- Hybrid Encryption
- Differences Between Encryption and Signing
- OpenPGP Protocol and GPG
- Cryptography in Web Security
- Use Cases of Asymmetric Encryption
- Use Cases of Symmetric Encryption
- Use Cases of Hash Functions
- Use of Algorithms in TLS/SSL Handshake Process
- Cipher Suite (Encryption Package)
- HTTP/3 and TLS 1.3
- DNS (Domain Name System)
- How DNS Works
- Recursive DNS Resolver and Authoritative DNS Server
- DNS Resolution Process and Local Caching
- DNS Record Types
- Reverse DNS (Reverse DNS) and PTR Records
- Audit Blocking, Restriction, and Redirection via DNS
- DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT)
- Public DNS Services
- DNS Security
- How DNSSEC Works
- Chain of Trust
- DNSSEC Record Types
- Cache Poisoning
- DNS Load Balancing and Traffic Routing
- DNS Load Balancing
- DNS Traffic Routing
- Advantages of DNS Load Balancing and Traffic Routing
- DNS Load Balancing and Traffic Routing Algorithms
- VPN and Proxy Mechanisms
- Definition and Core Principles of VPN
- VPN Use Cases on the Web
- Common VPN Protocols and Mechanisms
- PPTP (Point-to-Point Tunneling Protocol)
- L2TP/IPSec (Layer 2 Tunneling Protocol over IP Security)
- OpenVPN
- WireGuard
- SSTP (Secure Socket Tunneling Protocol)
- VPN Network Topologies
- Point-to-Point
- Site-to-Site VPN
- Hub-and-Spoke
- Mesh Network
- SSH Tunneling vs VPN Comparison
- What is a Proxy and Its Core Principles
- Comparison of VPN and Proxy
- Proxy Types and Their Use Cases on the Web
- Forward Proxy
- Reverse Proxy
- Transparent Proxy
- SOCKS Proxy
- Proxy and HTTPS: Traffic Handling Mechanisms
- Passthrough
- Interception (SSL Inspection)
- Tunneling
- Performance Impacts of VPN and Proxy in Web Infrastructure
- Anonymity with the Tor Network
- Fundamentals of the HTTP Protocol
- HTTP Definition and Client-Server Architecture
- What is HTTP?
- What is Client-Server Architecture?
- Role of HTTP in Client-Server Architecture
- Evolution of HTTP: HTTP/1.1, HTTP/2, and HTTP/3
- URL Structure and Components
- HTTP Debugging and Analysis Tools
- cURL (Client URL)
- Telnet
- ncat
- Postman
- Browser Developer Console
- Burp Suite
- Wireshark and tcpdump
- Raw Request and Raw Response Packets
- HTTP Methods and Use Cases
- HTTP Status Codes and Their Meanings
- HTTP Headers and Their Functions
- HTTP Body and Encoding Basics
- Which Methods Use a Body?
- Body Types and Formats
- Character Encoding
- Transfer Encoding
- URL Encoding (Special Case)
- Cookies and Session Management
- HTTP Caching Mechanisms
- Types of Caching
- Caching Headers and Their Functions
- Caching Process
- HTTP Definition and Client-Server Architecture
- Modern Web Development: Architectures, APIs, and Processes
- Basics of Web Development and the Role of APIs
- API Types and Design Approaches
- REST (Representational State Transfer)
- GraphQL
- SOAP (Simple Object Access Protocol)
- gRPC
- Webhooks
- Web Architectures: Monolithic, Microservices, and Serverless
- Communication and Data Formats in Web Applications
- JSON, XML, HTML, Protobuf
- HTTP
- WebSockets
- Message Queues
- Event-Driven Approaches
- Long Polling
- HTTP/2 Server Push
- gRPC Streaming
- SignalR
- RSocket
- Use of Communication Methods in Microservice Architecture
- Version Control
- DevOps and Deployment Strategies
- Modern Web Trends
- Jamstack: Static Sites and API Integration
- No-Code Approaches
- Edge Computing: API Usage at the Edge
- Progressive Web Applications (PWA)
- Single Page Applications (SPA)
- WebAssembly (Wasm)
- Web3: Decentralized Applications and APIs with Blockchain
- Web Management and Performance Enhancement Techniques
- Management and Optimization of Web Servers
- Server Operation Methods
- Multi-Request Handling Techniques
- Direct Serving of Static Files
- Performance Optimization Techniques for Web Servers
- Reverse Proxy: Definition and Use Cases
- Performance Impacts of Modern HTTP Protocols
- Web Data Compression Methods
- Gzip (GNU Zip)
- Brotli
- WebP (Image Compression)
- Performance Effects of Compression
- Browser Support
- Web Scaling Strategies
- Fundamentals of Distributed Systems on the Web
- Basics of Distributed Systems
- Fault Tolerance in Distributed Systems
- Single Point of Failure
- Scalability and Flexibility
- Data Distribution and Consistency
- Coordination and Synchronization
- CAP Theorem and BASE Consistency Model
- Data Management in Distributed Systems
- Managing User Data in Distributed Systems
- Session Management in Distributed Systems
- Database Scaling and Management in Distributed Systems
- Consistency and Synchronization
- Web Traffic Management and Load Balancing
- Load Balancing in Web Requests
- Load Balancing Algorithms
- Traffic Routing Strategies
- Traffic Queue Management and Rate Limiting
- Stateless and Stateful Approaches in Web Traffic
- Caching Mechanisms and CDN (Content Delivery Network) Usage
- Logging and Monitoring Mechanisms
- Management and Optimization of Web Servers
- Security in Web Infrastructure
- Secure Communication and Network Security
- HTTPS and Secure Communication
- HSTS (HTTP Strict Transport Security) and Details
- SSL/TLS Configuration and Optimization
- Man-in-the-Middle (MITM) Attacks and Mitigations
- Firewall and Web Application Firewall (WAF) Usage
- IP Whitelisting and Blacklisting
- Web Server Security
- Critical Paths and Access Control
- Traffic Management and Protection
- Security Headers and Content Security Policy (CSP)
- Web Server Hardening
- Additional Security Measures
- Web Application Security
- Cross-Site Scripting (XSS) and Mitigations
- SQL Injection and Protection Methods
- Insecure Direct Object References (IDOR)
- File Upload Security
- Server-Side Request Forgery (SSRF)
- Security Misconfiguration
- Sensitive Data Exposure
- Insufficient Logging and Monitoring
- Combating and Bypassing Web Scraping Techniques
- Session and User Security
- Session Hijacking
- Session Fixation
- Cross-Site Request Forgery (CSRF)
- Clickjacking
- Broken Authentication
- API Security
- Broken Object Level Authorization (BOLA)
- Broken Authentication
- Excessive Data Exposure
- Injection Attacks (API-Focused)
- DDoS Attacks (Distributed Denial of Service Attacks)
- Security Testing and Analysis
- Core Approaches to Security Testing
- Security Testing Methodologies and Standards
- Post-Attack Analysis and Forensics
- Comprehensive Elements of Security Testing and Analysis
- Tools and Technologies
- Risk Management in Web Security
- Modern Web Security Standards and Approaches
- OWASP (Open Web Application Security Project)
- CVE (Common Vulnerabilities and Exposures)
- CVSS (Common Vulnerability Scoring System)
- ISO/IEC 27001
- DevSecOps
- Zero Trust Security Model
- Bug Bounty Programs
- Future Trends
- Secure Communication and Network Security
Programming with Python
This course introduces software development with Python, covering core concepts, object-oriented programming, web scraping, and database operations. It is structured for beginners, building foundational skills progressively.
PrerequisitesThere are no prerequisites for this training.
Topics- Introduction to Programming with Python
- History and Overview of Python
- Advantages and Use Cases of Python
- Python Installation and Development Environments
- First Python Program: "Hello World"
- Python Syntax and Language Structure
- Variables and Variable Declaration
- Variable Naming Rules
- Code Indentation
- Comments
- Basic Syntax Rules (PEPs and PEP-8)
- Reserved Keywords in Python
- Print Function
- EXTRA: Python Lexical Structure
- Data Types and Structures - Introduction
- Overview of Data Types
- Variable Assignment and Dynamic Typing
- Introduction to Type Checking and Conversion
- Memory Usage in Python
- Everything is "First Class"
- Mutable vs. Immutable Objects
- Python Referencing Background
- Memory Optimization in Python Implementation
- Caching Small Integer Values
- String Interning
- Data Types - Numeric Types
- Integers and Their Properties
- Floats and Precision
- Arithmetic and Assignment Operators
- Mathematical Functions
- Data Type Conversions
- Data Types - Text-Based Types
- String Definition and Basic Operations
- Escape Characters
- Raw Strings
- String Operators
- String Formatting
- String Methods
- Bytes and Bytearray Concepts
- Encoding and Decoding Operations
- Data Types - Boolean
- Boolean Values
- Comparison Operators
- Logical Operators
- Short-Circuit Evaluation
- Chaining Comparisons
- Collection Data Structures - Lists
- List Definition and Properties
- List Operators
- Operations with List Data
- List Methods
- Multidimensional Lists (Nested Lists)
- Collection Data Structures - Tuples
- Tuple Definition and Properties
- Differences Between Tuples and Lists
- Tuple Operators
- Tuple Methods
- Packing and Unpacking Operations
- Collection Data Structures - Dictionaries
- Dictionary Definition and Key-Value Structure
- Dictionary Operators
- Operations with Dictionary Data
- Dictionary Methods
- Multidimensional Dictionaries (Nested Dictionaries)
- Collection Data Structures - Sets (Set and Frozenset)
- Set Definition and Properties
- Differences Between Sets and Lists
- Set Operators
- Operations with Set Data
- Set Methods
- Frozenset and Immutable Set Concept
- Use Cases for Sets
- Type Conversions
- Basic Type Conversion Functions
- Implicit and Explicit Conversion
- Error Handling in Type Conversion
- Console Interaction
- Print Function and Its Parameters
- Receiving User Input
- Conditional Statements
- If, Elif, and Else Structure
- Short-Circuit Evaluation
- Nested Conditions
- Best Practices for Error Handling
- Ternary Operator Usage
- Loops - While
- Structure and Usage of While Loops
- Break and Continue Statements
- Infinite Loops and Control Mechanisms
- Using Else with While
- Loops - For
- Basic Structure of For Loops
- Creating Loops with the Range Function
- Loops Over Lists, Tuples, and Dictionaries
- Using Else with For
- String Formatting
- Old-Style Formatting (% Operator)
- Str.format() Method
- F-String Usage and Advantages
- Formatting Examples and Tips
- Functions
- Defining and Calling Functions
- Parameters and Default Values
- Mutable Parameters
- Return Statement and Multiple Returns
- Keyword Arguments and Args/Kwargs Usage (Packing & Unpacking)
- Function Documentation (Docstring)
- Function Annotations
- Namespace and Scope
- Local and Global Variables
- Scope Hierarchy (LEGB Rule)
- globals() and locals() Key Functions
- Modifying Variables Outside Scope
- Global and Nonlocal Keywords
- Lambda Functions
- Definition and Syntax of Lambda Functions
- Creating Single-Line Functions
- Usage with Map, Filter, and Reduce
- List Comprehensions
- Basic Structure of List Comprehensions
- Conditional List Comprehensions
- Dictionary and Set Comprehensions
- Nested List Comprehensions
- Object-Oriented Programming (OOP)
- Class and Object Concepts
- Inheritance and Multiple Inheritance
- The self Keyword
- Constructor Method
- Attributes and Methods
- Encapsulation and Access Control
- Special Methods (Magic Methods: init, str, etc.)
- EXTRA: The Meaning of Underscores in Python
- Modules and Packages
- Defining and Importing Modules (import)
- Standard Library Modules (math, random, etc.)
- Package Structure and Usage
- Subpackage Usage
- Installing Third-Party Packages (pip)
- Using Python Virtual Environments
- Exception Handling
- Try, Except, Else, and Finally Structure
- Defining Custom Exceptions
- Raising Errors with Raise
- Iteration and Generators
- Iteration Concept and Iterable Objects
- Generator Functions and Yield
- Generator Expressions
- Performance and Advantages of Iteration
- Working with Files
- Opening and Closing Files
- Reading and Writing Files
- Error Handling in File Operations
- File Management with the With Statement
- File Encoding
- Working with JSON, XML, and YAML
- Introduction to JSON Format and Usage
- Reading and Writing JSON Data (json module)
- XML Format Basics and Parsing (xml.etree.ElementTree)
- Introduction to YAML Format and Usage (pyyaml)
- Comparison of Different Data Formats
- Data Conversion and Error Handling
- Handling HTTP Requests
- Introduction to HTTP Protocol and Core Concepts
- Operations with the Requests Library
- Using Headers and Parameters
- Fetching and Processing Data from APIs
- Web Scraping
- HTML Parsing with BeautifulSoup
- Fetching Web Page Content with Requests
- Processing Dynamic Pages with Selenium
- Data Extraction and Cleaning Techniques
- Database Operations
- Introduction to Database Types (SQL vs NoSQL)
- Lightweight Database Management with SQLite
- ORM Usage with SQLAlchemy
- Connecting to MySQL or PostgreSQL
- CRUD Operations (Create, Read, Update, Delete)
Linux System Administration
This course covers the essentials of managing Linux systems, from shell usage and file management to networking and process monitoring. The content is structured to build practical administration skills for those who work with or manage Linux environments.
PrerequisitesThere are no prerequisites for this training.
Topics- Introduction
- Shell and Basic Commands
- Linux Directory Structure
- Shell Usage
- Advanced Shell Operations
- Text Editors
- User and Group Management
- File Permissions and Ownership
- Running Commands as Another User
- HTTP Requests and Download Files
- Compressing Files and Directories
- Package Management
- Process Management
- Disk Management
- Linux Services
- Network Management
- Scheduled Tasks on Linux
- Shell Programming
Python for Hackers
This course focuses on using Python for cybersecurity, covering reconnaissance, vulnerability analysis, backdoors, and cryptography. The content is structured to provide practical security skills grounded in real-world techniques.
PrerequisitesBasic Python knowledge is required for this course.
Topics- Passive Recon
- Collecting Business Information
- Get Whois Records
- Social Engineering
- Active Scan
- Using Console Commands with Python
- Subfolder and Subdomain Scan
- Session Hijacking
- Getting Headers, Robots.txt and Sitemap Files
- Collecting Information from Source Code
- Form Brute-Force Attacks
- Port Scan
- SQL Brute-Force Attacks
- SQL-Injection
- FTP Brute-Force Attacks
- System Research
- File Search on A System
- Vulnerability Test with Payloads
- Backdoor
- Python Reverse Shell
- Basic HTTP Server with Python
- Permanent Web Backdoor
- Linux Services and Cronjob
- Cryptography
- Create User-defined Wordlist
- Hash Cracking
- Zip Cracking
- Steganography
- Defensive Security
- Get File Metadata
- File Parsing
- Online Malware Scanning with Python
- Using SMTP with Python
- Getting Threat Data and Implement to Firewall
- Monitoring Web Apps and IPs
- Projects
- Basic OSINT Tool
- Firewall Integrated Web API
Web Programming with .NET Core
This course covers the development of modern web applications with .NET Core, including Razor views, controllers, database integration, dependency injection, middleware, and design patterns. It is structured for those aiming to build production-ready web applications.
PrerequisitesBasic C# knowledge is required for this course.
Topics- Web Protocols and Web Lifecycle
- Introduction to .NET Core
- Razor View Engine
- Tag Helpers
- Views
- Controllers
- Communications Between Controller and View
- Models and Model Binding
- Database Integration
- Database CRUD Operations
- Action Results
- View Components
- Cookie and Session Management
- Validations
- Routing
- Areas
- Filters
- Deployment
- In-Depth - How .NET Core Works?
- In-Depth - Dependency Injection
- In-Depth - Middlewares
- In-Depth - Project Architectures
- In-Depth - Design Patterns
Programming with C#
This course provides a foundation in C# programming, covering console applications, variables, collections, control structures, and object-oriented principles. The content progresses from fundamentals to exception handling.
PrerequisitesThere are no prerequisites for this training.
Topics- Introduction to C#
- Creating Console Applications
- C# Lexical Structure
- Variables
- Type Conversions
- Collections
- Operators
- Condition Statements
- Loops
- Functions
- Object Oriented Programming
- Exception Handling
Introduction to Embedded Systems with Arduino
This course introduces the fundamentals of Arduino and embedded systems through hands-on electronics projects. The content progresses from basic electronics and digital I/O to sensors, communication protocols, and motor control.
PrerequisitesBasic knowledge of electronics and programming is required for this course.
Topics- Introduction to Arduino
- Basic Electronics Fundamentals
- Required Components and Materials
- Arduino IDE Interface and Workflow
- Digital Input & Output
- LED Control
- Transistor-Driven LED
- Button-Controlled LED
- Analog Input & Output
- Analog Reading with Potentiometer
- PWM (Pulse Width Modulation)
- RGB LED Color Control
- Sensors
- LDR (Light Dependent Resistor)
- LM35 Temperature Sensor
- HC-SR04 Ultrasonic Distance Sensor
- Infrared (IR) Sensor
- Displays & Audio
- Buzzer
- 7-Segment Display
- LCD 1602 Display
- Communication
- Serial Communication
- Communication Protocols (I2C, SPI, UART)
- HC-06 Bluetooth Module
- Motors & Drivers
- DC Motor Speed & Direction Control
- Servo Motor Control
- L293D Motor Driver
- Advanced Projects
- Building Your Own Arduino
- Robot Car Assembly
[ ~/Contact ]
You can reach me via email:
contact [at] serhatsonmez [.] net
Find me on decentralized internet with handshake (HNS) domain:
https://serhatsonmez
PGP key for mail/file encryption:
download public PGP key
fingerprint: 1D70 1676 F481 29D1 7AA8 EA40 CCD8 793A A166 5CC7