紫の死神
Cybersecurity Intern Candidate | Web Application & API Security | HTB CWES
Final-year Software Engineering student with hands-on web application pentesting experience. I assess authorized applications and APIs, document reproducible findings, and translate technical risk into actionable reports.
I'm Enes Demir, a final-year Software Engineering student in İstanbul focused on offensive security and application testing. My software background helps me look past visible behavior to the code, trust boundaries, and validation decisions behind it — and turn unexpected responses into reproducible findings.
That perspective shapes how I test: carefully, reproducibly, and with reporting in mind. I hold seven publicly verifiable certifications across web, network, and AI/ML security. I'm looking for a cybersecurity internship or junior pentesting role where careful testing and clear reporting matter equally.
Enes Demir
/ rootmancer
Cybersecurity Intern Candidate
Hands-on penetration testing — from authorized manual assessment to reproducible evidence and clear reporting.
Penetration Tester Intern
December 2025 — April 2026
Authorized assessment
As a Penetration Tester Intern at İHS Teknoloji, I manually assessed authorized web apps and APIs with Burp Suite against OWASP Top 10. I documented reproducible PoCs and request evidence, scored findings with CVSS v3.1, and delivered actionable reports.
Assess
Burp · OWASP
Prove
PoC · Evidence
Report
CVSS · Reports
7 earned certifications across web, network and AI/ML security — every one publicly verifiable.
HTB CWES
HTB Certified Web Exploitation Specialist
Hack The Box · 30 July 2026
eWPTX
Web Application Penetration Tester eXtreme
INE Security · April 2026
CWSE
Certified Web Security Expert
Hackviser · February 2026
CNPen
Certified Network Pentester
The SecOps Group · May 2026
C-AI/MLPen
Certified AI/ML Pentester
The SecOps Group · May 2026
CAPT
Certified Associate Penetration Tester
Hackviser · February 2026
PT1
Junior Penetration Tester
TryHackMe · April 2026
Beginner-to-intermediate CTF walkthroughs — I document every room I solve, from enumeration through exploitation and privilege escalation.
Enumeration → web exploitation via SQL injection, hash cracking, SSH access, then privilege escalation to root.
A full beginner pentest walkthrough: service enumeration, brute-forcing credentials, and privilege escalation, with notes.
Bypassing a file-upload filter to plant a PHP web shell, then escalating privileges to root.
A Rick-and-Morty themed web challenge: source-code recon, command execution, and hunting the three secret ingredients.
A custom Python brute-force script written to solve the Hammer challenge — automating the boring part of the attack.
Step-by-step exploitation, recorded end to end — TryHackMe rooms and PortSwigger labs on YouTube.
Open to cybersecurity internships and junior penetration tester roles — Türkiye or remote. My inbox is open.
