Skip to content
View miracaral's full-sized avatar
💭
Focused on Learning.
💭
Focused on Learning.
15 followers · 32 following

Achievements

Achievement: Pull SharkAchievement: YOLO

Achievements

Achievement: Pull SharkAchievement: YOLO

Block or report miracaral

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
miracaral/README.md

Hi, I'm Miraç 👋

Computer Engineering student from Türkiye, currently on an Erasmus+ exchange at the Czech Technical University in Prague. Most of my free time goes into offensive security and software engineering: breaking things on purpose, figuring out why they broke, and writing it down.

What I work on

  • Offensive security. Top 3% on TryHackMe, plus a lot of evenings on Hack The Box and Proving Grounds. I'm preparing for the OSCP.
  • Homelab. Three mini PCs and a switch running a Kubernetes cluster that I harden control by control and then attack from inside, each step with a before/after result. It's where I try out network policies, runtime enforcement, AI agent sandboxing and anything I'd rather not try on a real network.
  • Code. Mostly Python, C/C++ and Java, with some Go for networking tools.

Projects

  • homelab-k8s-security: securing my Kubernetes homelab control by control, then attacking it from inside: 7 of 7 container-breakout pods refused, a path from a pod to my home network found and closed, and a security audit before publishing.
  • k8s-agent-sandbox: runs an AI coding agent (Gemini CLI) as short-lived Kubernetes pods where a misbehaving agent can do as little as possible, controlled by one CLI with a kill switch and a daily limit. Tested against prompt injection hidden in a repository.
  • openssl-pki-homelab: a multi-tier PKI built with OpenSSL, plus an mTLS demo that turns away revoked certificates.
  • Foothold: a pentest and CTF companion that fills your target into every command. A vanilla JS front end that works offline, plus an optional Java / Micronaut API on Oracle Database, tested in CI against a real Oracle container and deployed to my Kubernetes homelab.
  • go-network-tools: port scanners, an echo server and a port forwarder, written in Go to understand TCP properly.
  • software-engineering-fundamentals: my study projects in C, C++, Java, Scala and Python, organised by topic.

Writing

Right now

  • Studying for the OSCP.
  • Version 2 of k8s-agent-sandbox: a Claude Code runner, an ops agent you can ask about the cluster, and agents that review each other's work.

Contact

Website · LinkedIn · Medium · TryHackMe · mmirac.aral@gmail.com

Turkish (native), English (C2).

Pinned Loading

  1. Foothold Foothold Public

    A searchable CTF & pentest methodology reference. Set your target once and every command fills itself in — work by phase, jump to a service by port, or paste an Nmap scan.

    JavaScript 1

  2. homelab-k8s-security homelab-k8s-security Public

    Shell 1

  3. software-engineering-fundamentals software-engineering-fundamentals Public

    C, C++, Java, Scala and Python code from my Computer Engineering studies, organised by topic: pointers, memory, recursion, sorting, competitive programming and more.

    C 1

  4. go-network-tools go-network-tools Public

    Go 1

  5. openssl-pki-homelab openssl-pki-homelab Public

    Shell 1

  6. k8s-agent-sandbox k8s-agent-sandbox Public

    Python