01
Homelab
Bare-metal Kubernetes on Proxmox
A 6-node cluster (1 control plane + 5 workers) running as VMs across three Proxmox VE hosts on mini PCs, with nodes provisioned from Cloud-Init templates.
Security, infrastructure & software
Hi, I'm Miraç Aral.
I'm a Computer Engineering student, currently on Erasmus at Czech Technical University in Prague. I build and run my own Kubernetes infrastructure, write software in Python and C, and spend a lot of my time on offensive security (red teaming) and reverse engineering: finding flaws, writing exploits, and doing vulnerability analysis.
Python · C / C++ · Go · Java · Bash
4 yrs
Offensive security
Top 3%
TryHackMe, 157 rooms
3rd / ~120
Google AI Academy
6 nodes
Kubernetes homelab
01 — Work
Selected projects
Labs and systems I built to practice, not a client list.
02
Security
Zero-trust networking on the cluster
Cilium (eBPF) with WireGuard between nodes and L3/L7 policies by security zone, plus kernel-level detection with Tetragon and Falco for breakout-style activity.
03
Security
PKI and mutual TLS with OpenSSL
A multi-tier PKI built with nothing but OpenSSL 3: an RSA root, RSA and ECC intermediates, and leaf certificates. Then put to work with mutual TLS, where valid client certificates are accepted and revoked ones are rejected through full-chain CRL checking.
04
Tooling
Foothold — pentest methodology tool
A single-page pentest and CTF companion. Set the target once and every command fills itself in; work by phase, jump to a service by port, or paste an Nmap scan to get the commands for exactly what is open.
05
Tooling
Distributed jobs with Kubernetes & KEDA
An automated pipeline that fans batches of jobs out across the worker nodes and scales with the queue — used for distributed recon (subfinder, naabu, ffuf, nuclei) and parallel analysis.
06
AI
AI coding agents on the cluster
I run Claude Code / AI coding agents in parallel across the cluster workers for coding and analysis, so the infrastructure I build is also where I put AI tooling to work.
07
Backend
REST API backend with FastAPI
Built the backend of a web app in Python with FastAPI at the Google AI & Technology Academy: REST endpoints (GET, POST, PUT, DELETE) with proper status codes and error handling.
08
Data
ML forecasting, Google AI Academy
XGBoost and Random Forest with feature engineering. Using a chronological train/test split, the model cut forecast error (RMSE/MAPE) by 30–40% versus a linear regression baseline — 3rd of ~120 teams.
09
Lab
Lateral movement and cluster escape
I attack my own cluster: container breakout, kubelet token theft, and moving between workers. Tools: peirates, cdk-go, amicontained, kubeletctl.
10
Research
Reverse engineering & exploit dev
Static and dynamic analysis of binaries, plus stack buffer-overflow work (Immunity Debugger, Mona) that I presented as a lesson at my university.
11
Web
This site — miracaral.com
Built with Next.js and Tailwind CSS, with CI/CD deployment on Vercel.
02 — Skills
What I work with
Red teaming
Web and network testing, Active Directory attacks (AD CS, Kerberos), initial access, privilege escalation, and writing up what actually worked.
Reverse engineering
Disassembly, debugging, and turning a finding into a short, reproducible proof of concept — including buffer-overflow exploitation.
Cloud-native & infrastructure
Kubernetes, Proxmox VE, Cilium/eBPF, KEDA, Cloud-Init, and Linux — I build, automate, and secure the cluster, then watch the kernel for breakout-style activity.
Software & data
Python, C/C++, Go, and Java. FastAPI backends, and ML with Pandas, scikit-learn, and XGBoost. I started with competitive programming in 2021, so I still think in edge cases and Big-O before I ship a loop.
Languages
Python / C / C++ / Go / Java / Bash
Also
Linux · Kubernetes · Docker · Proxmox VE · KEDA · Cilium / eBPF · WireGuard · Tetragon / Falco · Active Directory · FastAPI · Next.js · Pandas / scikit-learn · XGBoost · Verilog (learning) · Claude Code / Cursor
03 — About
A short version
I study Computer Engineering at Süleyman Demirel University (expected graduation 2029) and I'm on Erasmus in the IT department at Czech Technical University from September 2026 to February 2027. Courses there cover security, operating systems, software engineering, Windows administration (Active Directory), and computer architecture.
I've been doing offensive security for about four years. I practice on TryHackMe (top 3%, 157 rooms, including the Advent of Cyber 2025 Side Quest), Hack The Box, and Proving Grounds, and I'm studying for OSCP.
I started writing code in 2021, at 16, through competitive programming. That's where I learned to handle edge cases and to think about time and memory with Big-O before a loop goes in.
I also like building things. I got into the Google-backed AI & Technology Academy through its exam. There I built a FastAPI backend, and in the ML competition my forecasting model cut error by 30–40% against a linear regression baseline. We came 3rd of about 120 teams.
At home I run a 6-node Kubernetes cluster (1 control plane and 5 workers) on three Proxmox mini PCs. I use it for network policy, breakout labs, distributed jobs, and AI coding agents, without pretending it's a product company. I also teach Kubernetes and DevOps to other students at my university's club.
Timeline
- Erasmus, Czech Technical UniversityIT — security, OS, software, computer architecture2026
- OSCPStudying for the exam2026
- Homelab6-node Kubernetes on three Proxmox hosts2026
- Süleyman Demirel UniversityB.Sc. Computer Engineering2025
- Google AI & Technology AcademyEntrance exam · 3rd of ~1202025
- TryHackMeTop 3% · 157 rooms2025
- Advent of Cyber 2025 Side QuestHopper's Origins · ~0.1% finish2025
- Offensive securityStarted in earnest2022
- Competitive programmingAge 162021
Certificates
- TryHackMeJr Penetration Tester · Advent of Cyber 2025 · AoC 2025 Side Quest (Red Team)
- HackerRankSoftware Engineer · Software Engineering Intern
- CiscoNetwork Technician Career Path · Networking Devices and Initial Configuration · Network Addressing and Basic Troubleshooting · Network Support and Security · Learn-A-Thon 2026
- GoogleFoundations of Data Science · Get Started with Python · Introduction to Generative AI
Profiles
04 — Notes
A few facts
TryHackMe top 3%
157 rooms, 24 badges. Solved the Advent of Cyber 2025 Side Quest (Hopper's Origins), which about 0.1% of users finish.
Google AI Academy, 3rd place
Got in through the entrance exam. ML forecasting with XGBoost and Random Forest, ~120 teams.
HackerRank certificates
Software Engineer and Software Engineering Intern.
Erasmus at CTU
IT department. Courses in cybersecurity, operating systems, software, and computer architecture.
Homelab
6-node Kubernetes cluster on three Proxmox VE mini PCs, running AI agents and distributed jobs.
Competitive programming
Since 2021. Edge cases, runtime, memory — Big-O before code.
05 — FAQ
Short answers
Red teaming, reverse engineering, and a homelab I can build, secure, and break on purpose. I also write Python and FastAPI backends, run AI coding agents on the cluster, and do the occasional data project.