$ whoami
Iliya Dindar
Engineering secure, scalable systems — hunting whatever breaks them.
Computer Engineer · Bug Hunter · AI Enthusiast
Based in Istanbul. I explore AI & NLP, hunt vulnerabilities through OWASP methodology, and ship tools that solve real problems.
What I'm working on
OWASP & Bug Bounty
Deep-diving into OWASP Top 10, practicing DOM XSS, CSRF, and injection vectors. Active in CTF challenges and bug hunting.
AI & NLP Exploration
Learning transformer architectures and experimenting with neural networks. Building AI-powered tools with real-world applications.
Full-Stack Systems
Shipping production apps with Next.js + TypeScript frontends and Python/Flask backends. Admin panels, APIs, and WebSocket services.
Self-Directed Research
Exploring AI, NLP, and quantum computing concepts through personal projects, experiments, and deep dives into papers.
Who I am
Education
Computer Engineering, Nişantaşı University — 2nd Year
Interests
AI, NLP & Quantum Computing
Languages
English · Persian · Turkish
Security
Penetration Tester · Bug Bounty · OWASP
Builder
20+ Telegram bots (12K+ users), PyPI packages, full-stack apps
Technologies
Languages
Backend & Frameworks
AI / ML
Data & Infra
Security
Things I've built
IliyaMed
Full-stack social platform with PHP frontend, Flask REST API, Next.js admin panel, WebSocket server terminal, and MySQL backend. Deployed in production.
TNT-AI
Real-time speech transcription & translation powered by Whisper AI with offline neural machine translation.
PyRoxi
High-performance async proxy library for Python with SOCKS5/HTTP support. Zero dependencies. Published on PyPI.
Strategic GameBot
Multiplayer war-simulation Telegram bot with real-time strategy mechanics and persistent game state.
TrumpBot
AI-powered Telegram bot for fun group engagement with NLP-driven interactions.
ZipBike
File compression tool supporting Huffman, LZ77, and RLE algorithms with a custom .zbik format.
Achievements
GitHub Pro — Starstruck, Pull Shark ×2, Quickdraw badges
PyPI Published — Open-source Python packages in production
20+ Telegram Bots — Including one with 12K+ active users
Production App — Full-stack social platform live at lab.iliyadindar.site
CTF Player — DOM XSS, filter bypass, JS URI exploits
Cloud Deployments — VPS, Docker, production backends
Writeups from the field
DOOM — Chaining CSPT, Open Redirect & XSS
Three findings that look minor on their own — a client-side path traversal, an open redirect, and an XSS sink — chained into a working exploit. Discovery, payload construction, and impact, step by step.
What I can build for you
Telegram Bots
Custom bots for automation, games, communities, and business — 20+ delivered, 12K+ users served.
Full-Stack Web Apps
Production-ready apps with Next.js, Flask/FastAPI backends, MySQL/PostgreSQL, and admin panels.
Security Audits
Junior penetration testing, OWASP Top 10 assessment, and vulnerability reporting for web applications.