Mehmet Kadir Arıcı

A multi-crate Rust workspace for macOS/Linux that monitors per-application outbound traffic and enforces allow/block decisions instantly.

• Privilege-separated netsentinel-helper service (Unix socket IPC) plus Tauri GUI/TUI/CLI interfaces
• GeoIP-based live map visualization with a hot-swap GeoIP architecture
• Port-scan / anomaly detection with real-time Telegram alerts
• 273 commits of active development

A full-stack system that extracts safe code from 15+ languages using Tree-sitter-based AST validation, exposing 30+ API endpoints.

• Multi-layered security: SSRF, path-traversal, and command-injection protections
• A "self-healing" JSONL export pipeline with automatic quality control for LLM training data
• Monaco Editor integration, multi-source import from Git repos, files, or raw text
• Containerized with Docker, maintained with Dependabot

An authentication/authorization stack with Argon2id password hashing, JWT+TOTP 2FA, RBAC, and a tamper-evident, genesis-block-verified hash-chain audit log.

• Secure, remote Wake-on-LAN engine over WireGuard VPN (raw sockets)
• ARP/ICMP-based LAN discovery engine
• mTLS-secured REST API and a WebSocket-based live device-status dashboard

One automation framework split into two modules as needed: istinye-bb-sync for students, bexam for academic staff.

• Shared across groups in its own vocational school faculty and used by faculty members
• Multi-platform CI/CD pipeline for Windows/macOS
• Found and patched a path-traversal vulnerability, published a SECURITY.md policy
• User analytics and authentication via Supabase

An MVVM-architected workout log app with routine, weekly program, and goal tracking.

• Real-time workout tracking via iOS Live Activities on the Dynamic Island / Lock Screen
• Apple HealthKit integration
• Location-based gym/route features (deep links into Google Maps/Waze)

A full-stack attack-simulation environment built on Frida to research iOS biometric/MFA bypass techniques — an academic research project.

• 7 distinct attack surfaces: Face ID, camera, liveness/AI vision, anti-tamper, MFA chain, deepfakes
• Kernel-level IOSurface → CMSampleBuffer → VTCompressionSession camera-pipeline hook
• Rust (Axum+WebSocket) backend, a React "tactical" dashboard, and a Swift test target

A Scapy-based network monitoring and blocking system that detects SQL injection, XSS, and brute-force attacks in real time.

• An alternative monitoring mode on macOS that needs no root privileges
• JSON reporting plus separate security research notes (detection methods, emerging threats)

A platform for tracking CTF competitions and security conferences, with security scanning built into CI.

• Secret-scanning (gitleaks) integrated into CI
• Fixed an XXE vulnerability by replacing unsafe XML parsing with defusedxml
• Integration tests against PostgreSQL + Redis, i18n, Telegram notifications