Yusuf Eren Gerek

I'm a third-year Computer Engineering student at Adıyaman University; my focus is cybersecurity and security-oriented software development.

I started programming in middle school; in high school I concentrated on web development (HTML, CSS, JavaScript), then explored embedded systems, desktop applications and interface design. Over time, my focus shifted toward security.

Today I work on both offensive security and artificial intelligence. I've built my own reverse proxy server, a monorepo architecture with an integrated firewall, and a passive reconnaissance tool for Next.js applications; I compete in CTFs across web, cryptography and reverse engineering. Under the TÜBİTAK 2209-A programme I'm also working on an AI-assisted system for visually impaired people that combines computer vision, OCR and natural language processing. I hold the Certified Associate Penetration Tester (CAPT) certification and took part in the Siber Vatan programme.

Summary

My education, experience, certificates and life timeline

Education

  1. Undergraduate

    August 2023 – June 2027

    Computer Engineering · Adıyaman Üniversitesi

    Member of the Information Technologies Application and Development Community; focusing on artificial intelligence and cybersecurity.

  2. High School

    September 2019 – June 2023

    Şehit Mehmet Karacatilki Anadolu İmam Hatip Lisesi Proje Okulu

Experience

  1. Researcher — AI-Assisted System for the Visually Impaired

    November 2025 – Present

    TÜBİTAK 2209-A · Adıyaman Üniversitesi

    In a project funded under the TÜBİTAK 2209-A University Students Research Support Programme, we're building a system that combines computer vision, OCR and natural language processing to read text aloud in real time for visually impaired people. Advisor: Ersan Yazan.

    AIComputer VisionOCRNLPAraştırma
  2. Web Developer (Freelance)

    April 2026 – Present

    Freelance

    Took on freelance web development projects, building responsive and user-focused interfaces with modern web technologies (React, Next.js, TypeScript).

    Web DevelopmentReactNext.jsTypeScript

Certificates

  1. Certified Cybersecurity Foundations (CORE)

    July 2026

    Hackviser

    A foundational cybersecurity certification from Hackviser, earned by completing training modules and hands-on security exercises and demonstrating core competence in cybersecurity fundamentals.

    View certificate
  2. Certified Associate Penetration Tester (CAPT)

    October 2025

    Hackviser

    A hands-on certification from Hackviser assessing web and application penetration testing skills.

    View certificate
  3. Web Application Security & Penetration Testing

    July 2024

    BTK Akademi

    BTK Akademi online training — web application security vulnerabilities (OWASP) and penetration testing techniques.

    View certificate
  4. Introduction to Firewalls

    July 2024

    BTK Akademi

    BTK Akademi online training — firewall concepts, types and basic configuration.

    View certificate
  5. Machine Learning Applications with Python

    July 2024

    BTK Akademi

    BTK Akademi online training — machine learning algorithms and applications with Python.

    View certificate
  6. Docker Fundamentals

    July 2024

    BTK Akademi

    BTK Akademi online training — container technology, images and core Docker commands.

    View certificate

Life Timeline

  1. High School & Web Development

    2019

    At Şehit Mehmet Karacatilki Anatolian İmam Hatip Project High School, focused on web development with HTML, CSS and JavaScript.

  2. Computer Engineering

    2023

    Started Computer Engineering at Adıyaman University; moved toward cybersecurity and artificial intelligence.

  3. Open-Source Security & CTF

    2025

    Built open-source security projects such as a reverse proxy and reconnaissance tooling. Took second place in the team category at the Mühendisler Molada 2025 CTF with team 'Don'tLook' (web, crypto, reverse engineering).

  4. AI Research (TÜBİTAK 2209-A)

    2026

    Our AI-assisted glasses project for visually impaired people was awarded funding under the TÜBİTAK 2209-A programme; I'm working on computer vision, OCR and natural language processing.

Projects

Selected work I've built

AI-Assisted Glasses (TÜBİTAK 2209-A)
Featured

A research project funded under the TÜBİTAK 2209-A programme, aimed at making printed material more accessible to visually impaired people. A multi-layered system combining computer vision, optical character recognition (OCR) and natural language processing processes text in real time and reads it aloud to the user. Conducted as a team at Adıyaman University Computer Engineering, advised by Ersan Yazan.

AIComputer VisionOCRNLP
Next.js Action Discovery Tool
Featured

A passive reconnaissance tool that detects Server Actions in Next.js applications by analyzing only publicly available JavaScript files. It exploits no vulnerability; its purpose is to make externally exposed endpoints visible from a security standpoint. It verifies discovered actions to eliminate false positives and scans quietly using user-agent rotation and randomized delays. Built with Python.

PythonSecurityReconNext.js
Reverse Proxy Server
Featured

A component-based HTTP reverse proxy server built with TypeScript and Node.js. It routes incoming requests to backend services according to the domain, subdomain and path rules defined in a services.yml file, with automatic redirects, host+port or URL targets, logging and error handling. Rewritten from the ground up from an earlier CommonJS version.

TypeScriptNode.jsYAMLNetworking
Secure Monorepo Architecture

A secure and scalable monorepo architecture for full-stack web applications. It organizes frontend, backend and firewall as separate modules and secures service communication through an integrated firewall and API gateway. Secure API access is provided by default using tools such as helmet, cors and express-rate-limit.

Node.jsExpressHelmetAPI GatewaySecurity
Universal File Reader (CLI)

A high-performance, cross-platform command-line tool for converting across filesystems. It supports ext4, NTFS, APFS, FAT32 and local directories, offers real-time speed/ETA tracking, stream-based processing and 64KB buffering, and preserves timestamps and permissions. Built with Node.js and TypeScript.

TypeScriptNode.jsCLICross-Platform
Personal Portfolio (v1)

My first personal portfolio website; my early work on design and modern web development. Built with Next.js, React and Tailwind CSS.

Next.jsReactTypeScriptTailwind

Skills

My personal proficiency scores across SecOps, DevSecOps and DevOps tools

SecOps

Wireshark
Nmap
Burp Suite
Metasploit
Splunk

DevSecOps

Trivy
SonarQube
OWASP ZAP
Snyk
HashiCorp Vault

DevOps

Docker
Kubernetes
Terraform
GitHub Actions
Ansible
Prometheus

Appointment

Pick an available day and time from the calendar; confirmed via email verification

Pick a day

July 2026
MonTueWedThuFriSatSun

Contact

Have an idea? Drop a message or reach out on social media