Ege Balcı
Threat Intelligence Division Manager
The Hague, South Holland, Netherlands
Summary
🤩
Rockstar🎓
Top SchoolEge Balcı is a seasoned threat intelligence leader with 10 years of hands-on cybersecurity and research experience, currently managing the Threat Intelligence Division at PRODAFT from The Hague. He progressed from researcher roles into leadership, blending strategic oversight with deep technical expertise in exploit development, payload generation, and encoder obfuscation. An active security engineer on Metasploit and author of tools like sgn and HERCULES, he combines offensive research skills with practical tooling that targets real-world detection and persistence challenges. His work spans low-level exploit chains, encoder improvements, and cross-platform payload generation in Go, demonstrating both breadth and craftsmanship. Colleagues rely on him to translate advanced vulnerability research into operational intelligence and reliable defensive recommendations. He brings a curious, builder-first mindset—refining offensive techniques into reproducible, testable tooling that informs stronger defenses.
10 years of coding experience
5 years of employment as a software developer
Bilgisayar Mühendisliği, Bilgisayar Mühendisliği at Bahcesehir University
Turkish, İngilizce, German
Github Skills (36)
metasploit10
data-generation10
assembly10
python10
rce10
it-security10
generator10
command-injection10
security10
ruby10
x8610
obfuscation10
exploit10
go10
x86-6410
Programming languages (7)
Github contributions (5)
EgeBalci/HERCULES
Apr 2016 - Oct 2020
HERCULES is a special payload generator that can bypass antivirus softwares.
Role in this project:
Full-stack Developer
Full-stack DeveloperContributions:221 commits, 2 PRs, 199 pushes in 4 years 6 months
Contributions summary:Ege primarily worked on developing a payload generator, focusing on Windows systems. Their contributions involved creating and modifying Go code to generate executable payloads, which included features such as persistence and file embedding. They demonstrated proficiency in using Go to build executables, handle command-line arguments, and interact with the operating system. The user's work also extended to Linux platform, indicating an understanding of cross-platform development.
bypass-antivirusgolangreverse-shellmeterpreterpayload
EgeBalci/sgn
May 2020 - Nov 2022
Shikata ga nai (仕方がない) encoder ported into go with several improvements
Role in this project:Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:3 releases, 1 review, 23 commits in 2 years 5 months
Contributions summary:Ege primarily focused on enhancing the core functionality of the sgn (Shikata ga nai) encoder. Their work includes improvements to garbage code generation, the introduction of functions to calculate instruction sizes, and the addition of more robust testing procedures within the yara test suite. Furthermore, the user addressed multiple encoding-related bugs, enhanced the x64 decoder stub, and refactored and improved the project, showcasing expertise in code obfuscation and security-related techniques.
golangimprovementsencoder
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.