dagdelean.dev

§00Operator file

Samsun UTC+3

TR
Operator file TLP:CLEAR Rev 2026.10 Class Offensive security, in training Base Atakum, Samsun · TR

Emre Kadir Dağdelen a.k.a. dagdelean

I build for the web, and I am training to break it. I ship production sites, write open-source tools and study information security at OMÜ. The goal is red team operations.

Open a channel See the tools
Pathfinding4 hops · 1 pending Shortest path e.dagdelen → red team operators
  1. E.DAGDELENUser · infosec student, OMÜ Owned
    MemberOf
  2. OMÜ SİBERGroup · board of directors Owned
    AdminTo
  3. OMUSIBER.ORGComputer · deployed 28.09.2026 Owned
    HasSession
  4. E.DAGDELEN-PTUser · CAPT · HV-CORE · Siber Vatan Owned
    AddMember · in progress
  5. RED TEAM OPERATORSGroup · target Target

ownedpendingedges follow BloodHound semantics

TA0043Reconnaissance

Profile

01 / 06

I learned to ship before I learned to break. I started with two summers of C# at a game studio, then built an agency that delivers real sites to real clients.

Now I study information security and point that instinct the other way. I want to understand a system well enough to take it apart: in scope, with permission and with a report at the end.

I run Pollykoo Agency, sit on the board of OMÜ Siber and maintain two open-source projects. My target is red team work: adversary emulation, Active Directory attack paths, Windows internals and the tooling that ties them together.

Name
Emre Kadir Dağdelen
Handle
dagdelean
Base
Atakum, Samsun, TürkiyeUTC+3, open to remote work
Study
B.Sc. Information Security TechnologyOndokuz Mayıs University, 2025-2029
Board
OMÜ SiberUniversity cybersecurity community
Agency
PollykooFounder since 2024
Languages
Turkish (native)English (professional working)
Open to
Offensive security internshipsWhite-label and overflow web work for agencies

Capability matrixStatus, not percentages

AreaStatusEvidence
Web application testingActiveSiber Vatan, 200-hour penetration testing program
Network and infrastructure testingActiveCAPT and HV-CORE from Hackviser
Windows internals and Win32 APITrainingProcess memory and API research in a personal lab repo
Active Directory attack pathsTrainingLab work. The graph above is not a coincidence.
Applied cryptographyActivebicbic416, with its own cryptanalysis report
Tooling in Python and CActivenopanic (141 tests) and bicbic416 (C11)
Adversary emulation and C2NextPlanned after Active Directory
Web engineeringProductionFour live sites, agency since 2024

TA0042Resource Development

Arsenal

02 / 06

Tool 01 · Python 3.10+ · MIT · on PyPI

nopanic_

The resilience toolkit Python was missing. Retry, circuit breaker, timeout, adaptive rate limiting, bulkhead, hedging and fallback, all behind one decorator API. It works sync and async and has no runtime dependencies.

Why it is hereOperators write tools that have to survive unreliable, hostile networks. nopanic applies that discipline in public, and its bugs are written up below.

  • Retry
  • Circuit breaker
  • Timeout
  • Rate limit · AIMD
  • Bulkhead
  • Hedging
  • Fallback
pip install nopanic
GitHub PyPI
resilient.pysync + async
from nopanic import (compose, fallback, retry,    circuit_breaker, timeout, backoff, CircuitOpen) # one breaker per dependency, shared by every callerllm = circuit_breaker(failure_threshold=0.5, reset_timeout=20.0) resilient = compose(    fallback(lambda e: "temporarily unavailable",             on=(ConnectionError, CircuitOpen, TimeoutError)),    retry(attempts=3, on=(ConnectionError, TimeoutError),          backoff=backoff.full_jitter(0.2)),    llm,    timeout(30.0),   # per attempt) @resilientasync def ask(prompt: str) -> str: ...
0

runtime dependencies

141

tests; the full suite runs in under two seconds with no sleeps

1.3µs

worst-case overhead per policy on the success path

1000×

faster on a 3.2M-call load test after removing a quadratic breaker window (40 min to 2.4 s)

Tool 02 · C11 · MIT · released 12.10.2026

bicbic416_

An experimental 416-bit block cipher that I designed and implemented in portable C11. It ships with CTR mode, a 416-bit hash, a password-based file encryption tool, a browser version and an independent Python reference implementation.

Read before useIt has not been through expert cryptanalysis. The repo includes my own reduced-round analysis and says it plainly: use AES-GCM or ChaCha20-Poly1305 for real data.

  • ARX rounds
  • Key-dependent multiply
  • CTR mode
  • Miyaguchi-Preneel hash
  • PBKDF2 + HKDF + HMAC
  • Optional ChaCha20 layer
Read the write-up GitHub Try it in the browser
avalanche.txt1-bit flip · 20,000 trials
RoundsMean bitsStd devIdeal
1192.9247.05no
2208.0910.17yes
3208.0810.13yes
4208.0310.26yes
8208.0010.26yes
16208.0310.12yes

The ideal is a mean of 208 bits with a standard deviation of 10.2. Diffusion is full from round 2, and the default of 16 rounds leaves twice the margin the spec asks for.

416bit

block, split into 13 words of 32 bits

16

rounds by default, with the key mixed back in every round

1325MB/s

CTR throughput on one core with vectorised lanes (Clang, native build)

600k

PBKDF2 iterations before HKDF splits the key three ways

TA0002Execution

Shipped

03 / 06

Production deploymentsAll live, all linkable

  1. ENG-04 omusiber.orgOMÜ Siber Website for the university's cybersecurity community, with six training tracks, an event calendar and a three-part flag hunt hidden inside the page. Latest · 28.09.2026Design · build · deploy
  2. ENG-03 arzagro.comArzagro Bilingual corporate site for an agricultural exporter. The TR/EN build opened the door to international buyers. Bilingual TR / EN
  3. ENG-02 lotusinsaatemlak.comLotus Construction & Real Estate One brand with two sites. A fork at the entrance sends visitors either to construction or to real estate. Dual-site build
  4. ENG-01 solislumentr.comSolis Lumen Café website with a QR menu on its own subdomain. Scan the code on the table and the live menu opens. Site · QR menu

I also keep a private library of 26 ready-made designs across 16 industries for fast overflow delivery. I can walk you through it on a call.

TA0004Privilege Escalation

Clearances

04 / 06

Escalation log · oldest firstCredential IDs are verifiable

  1. LVL 1Jan 2026

    CAPTCertified Associate Penetration Tester

    Hackviser

    CredentialHV-CAPT-P746FUJO

  2. LVL 2Jun 2026

    Siber VatanPenetration Testing Training, 200 hours

    Türkiye's national cyber security program

    Credential12625794724929

  3. LVL 3Jul 2026

    HV-COREHackviser Core Certification

    Hackviser

    CredentialHV-CORE-0F82DTZZ

  4. LVL 4Pending

    Classified. Next escalation in progress

    Details after completion.

    Credentialn/a

B.Sc. Information Security Technology

Ondokuz Mayıs University · 2025-2029 · cybersecurity major

Year 2 of 4

TA0008Lateral Movement

Path

05 / 06

Every move, one hop furtherOldest first

  1. 2021-22Hop 01

    EditMode StudioVolunteer intern ×2

    Two summers of C# and Unity at a game studio. My first lines of code, my first build and my first night asking why it would not run.

  2. 2024 →Hop 02

    Pollykoo AgencyFounder

    End-to-end websites for small businesses: design, code, content, domain and deployment. An AI-assisted workflow delivers in days.

  3. 2025-26Hop 03

    Akca NetworkCo-founder

    An Estonia-based startup in network security and quality management. This is where I learned to work remotely with an international team.

  4. 2025 →Hop 04

    OMÜ SiberBoard of directors

    The cybersecurity community at Ondokuz Mayıs University. I was on the organizing crew of the Samsun Cyber Security Summit, behind the scenes rather than on stage, and I built omusiber.org.

  5. NextHop 05

    Red teamOperator, pending

    Adversary emulation, Active Directory, Windows internals and C2. If your team runs engagements and trains people, I would like to talk.

TA0011Command and Control

Contact

06 / 06

Open a
channel.

Offensive security internships, white-label web projects or a debate about circuit breakers. Pick a protocol.