Kelyan Yesil

, Penetration Tester

Junior penetration tester with a strong interest in ethical hacking, hardware hacking, network security, and cloud computing.

Junior penetration tester with a strong interest in ethical hacking, hardware hacking, network security, and cloud computing.

Posts by this author

Why this 14-year-old heap corruption vulnerability in MS Word is still relevant

A critical vulnerability with Remote Code Execution (RCE) potential in Microsoft Word (CVE-2023-21716) with a CVSS score of 9.8 was among the Zero-Day vulnerabilities that were fixed.

Kelyan Yesil

Published at

18 Apr 2023

Updated at

05 May 2023

6 min read
Log4J - why some CVEs (almost) never disappear

Unless you’ve been on a sabbatical for the past year, you probably know how a critical vulnerability known as Log4shell took over the world.

Kelyan Yesil

Published at

07 Apr 2023

Updated at

13 Apr 2023

7 min read
The most exploited vulnerabilities in 2022

Offensive security is a fast-moving space, yet some security vulnerabilities persist for years, causing problem after problem. 2023 being no exception, you can spare yourself from repetitive work by learning to find and mitigate these top 10 CVEs.

Kelyan Yesil

Published at

16 Mar 2023

Updated at

13 Apr 2023

12 min read
Phishing a company through a 7-Zip misconfiguration

Reading about phishing can sometimes feel tedious, as many articles simply rehash the same old scenarios and prevention strategies without diving into technical details or offering anything fresh. But don't worry, we've got you covered!

Kelyan Yesil

Published at

19 Jan 2023

Updated at

13 Apr 2023

8 min read
How the DMARC email security protocol can take down an entire company

Get familiar with DMARC, a less-known email security protocol that can help businesses prevent phishing campaigns.

Kelyan Yesil

Published at

13 Dec 2022

Updated at

10 Apr 2023

12 min read
Everything you need to know about the new OpenSSL vulnerabilities (CVE-2022-3602 & CVE-2022-3786)

Before securing systems, we need to understand what we’re trying to secure and how to do it. Today we are exploring two new vulnerabilities that got the community's attention this month. Most importantly you will learn how to patch them and how impactful they are.

Kelyan Yesil

Published at

18 Nov 2022

Updated at

13 Apr 2023

10 min read

Kelyan Yesil

Posts by this author

Why this 14-year-old heap corruption vulnerability in MS Word is still relevant

Log4J - why some CVEs (almost) never disappear

The most exploited vulnerabilities in 2022

Phishing a company through a 7-Zip misconfiguration

How the DMARC email security protocol can take down an entire company

Everything you need to know about the new OpenSSL vulnerabilities (CVE-2022-3602 & CVE-2022-3786)