# Can Türk

> I'm a full-stack developer focused on application security. I build first, then try to break what I built.

URL: https://iamcanturk.dev/en/

---

**Full Stack Developer · Application Security Specialist · Self-Taught Designer · Photography Lover**

Location: Bursa, TR · Contact: https://iamcanturk.dev/en/contact/

## Notebook
- [I Turned My Personal Site Into a Building](https://iamcanturk.dev/en/i-turned-my-site-into-a-building/) — Moving from WordPress to a static Astro site, I rebuilt my homepage as a cross-section of a pixel-art building. The mascot, the elevator, day and night rooms, and the technical decisions behind them.
- [I Wrote a Doctor for My Docker](https://iamcanturk.dev/en/i-wrote-a-doctor-for-my-docker/) — I used Docker every day but had no idea what was inside it. DoctorDock scans your local Docker for security problems, misconfigurations, and reclaimable disk in under a second — entirely offline.
- [Reverse Development in the Age of AI](https://iamcanturk.dev/en/reverse-development-in-the-age-of-ai/) — I sat down to write after a long break and noticed something strange: I can't think as well as I used to. What is AI doing to the way we think?

## Projects
- [DoctorDock — A doctor for your Docker](https://iamcanturk.dev/en/proje/doctordock-a-doctor-for-your-docker/): An open-source tool that scans your local Docker environment for security problems, misconfigurations and reclaimable disk in under a second, entirely offline. It ranks findings by severity and gives you a health score out of 100.
- [Erklig — Mighty backdoor analysis engine](https://iamcanturk.dev/en/proje/erklig-mighty-backdoor-analysis-engine/): An open-source security tool for detecting web shells and backdoors on servers, using signature and behaviour based analysis.
- [MergenFlow — The freelancer OS](https://iamcanturk.dev/en/proje/mergenflow-the-freelancer-os/): An open-source SaaS for freelancers that combines financial projection, recurring budget management and Kanban workflow tracking in one place.

## Security
- [CVE-2026-28403](https://iamcanturk.dev/en/security/cve-2026-28403/) (CVSS 7.6) — Missing WebSocket origin validation (Cross-Site WebSocket Hijacking)
- [CVE-2026-28412](https://iamcanturk.dev/en/security/cve-2026-28412/) (CVSS 6.5) — Resource exhaustion through unlimited connections (DoS)

## Pixel Shorts
30 seconds a day on software, AI, tech and security, on X, Instagram and TikTok. Every episode's script and checklist live here. The videos are in Turkish.