MehmetBerkayKarataş

I like to understand how something works at the byte level. Then I turn it into something people actually use.

Automotive diagnostics · C++ · Muğla

My own wayWhatever I know, I learned by taking things apart.

someone lost in heapReverse engineering and security research. I open up undocumented systems and work out how they run.

and then it crashes0xC0000005. Most of the real work happens right here, in the wreckage.

Things I have builtI like taking an idea from the first line all the way to a real user.

Hover to read the bytes.
Scroll to take it apart.

Mehmet Berkay Karataş

Automotive Diagnostics and Modern C++ Engineer

Automotive diagnostics and embedded C++ engineer with production experience in vehicle communication stacks: CAN, CAN FD, ISO-TP, UDS (ISO 14229), OBD-II, WWH-OBD, SAE J1939 and ASAM-style diagnostic tooling. Reverse engineering across automotive, Windows and Linux underpins the diagnostic work.

Automotive Diagnostics & Protocols
Vehicle communication and diagnostics: CAN, CAN FD, ISO-TP, UDS (ISO 14229), OBD-II, WWH-OBD, SAE J1939 and ASAM-style provider tooling.
Embedded & Modern C++
Production software in C and modern C++: transport and session layers, device communication and native, low-level components.
Reverse Engineering & Security
Reconstructing undocumented ECUs, protocols and device behaviour across automotive, Windows and Linux. Recognised on HackerOne, Bugcrowd and Google VRP.
GitHub →

Profile

I am an automotive diagnostics and embedded software engineer with around five years of experience building vehicle communication and diagnostic software in C and modern C++. I work across the stack that connects a diagnostic application to an ECU: transport and session layers (ISO-TP, UDS, WWH-OBD), on-board and heavy-duty protocols (OBD-II, SAE J1939) over CAN and CAN FD, and ASAM-style provider tooling on top.

Reverse engineering is the backbone of that work: much of automotive diagnostics is about understanding undocumented ECUs, protocols and device behaviour and turning them into reliable, maintainable software. The same skill set extends to Windows and Linux systems analysis and to security research, where my findings are recognised on HackerOne, Bugcrowd and the Google Vulnerability Reward Program.

Outside my core diagnostics work I also build independent software products end to end, which are listed further down as selected side projects.

Experience

2026 - Present
R&D / Rapid Prototyping Engineer
CarTelSol GmbH · Berlin, Germany (remote)
Fast, end-to-end R&D prototyping for new product and customer areas, proving out complete systems, from firmware to UI, quickly and reliably to open new business lines.
- Independently built the full software stack for a cellular IoT tracking device (PCB designed in-house by the team's hardware engineer): firmware, an over-the-air update (FOTA) pipeline, GPS positioning, backend and frontend, for a product using NTN and NB-IoT/LTE-M connectivity.
- Designed and built a Linux-based IP camera monitoring system for infrastructure-linked deployments: backend services running as systemd units, with a custom ImGui interface that lets operators manage and view cameras without exposing the underlying OS.
2023 - 2026
Software Developer
CarTelSol GmbH · Berlin, Germany (remote)
Automotive diagnostic software and vehicle communication protocols in modern C++.
- Built a lightweight ASAM-style diagnostic provider for vehicle communication over UDS (ISO 14229), OBD-II and WWH-OBD (SAE J1979-2 / ISO 27145 / ISO 15765-4) and SAE J1939, on top of ISO-TP transport over CAN and CAN FD.
- Implemented request/response handling, session management and error handling while keeping the stack compliant with the diagnostic standards.
- Developed a D-PDU API (ISO 22900-2) implementation end to end, conforming to the specification, for standardized communication with vehicle diagnostic interfaces.
2023 - 2026
C++ Developer
ArGeTeSi LTD · Muğla, Türkiye
Vehicle diagnostics and supporting backend systems.
- Developed vehicle diagnostic components and the backend services that support them, in C++ and Node.js.
- Worked with international engineering teams on protocol and integration work.
2019 - 2023
Security Analyst
II-CO · Muğla, Türkiye
Reverse engineering and software security.
- Performed reverse engineering and memory analysis of Windows software and communication protocols.
- Built anti-cheat and anti-tampering components for game clients, including ring-3 detection and integrity checks.
- Provided software security and reverse engineering consultancy.

Education

2024 - Present
Muğla Sıtkı Koçman University
Computer Programming · Muğla, Türkiye

Expertise

Automotive Diagnostics: UDS - ISO 14229 · D-PDU API - ISO 22900-2 · ISO-TP - ISO 15765-2 · OBD-II · WWH-OBD · SAE J1939 · CAN · CAN FD · ASAM-style diagnostic providers · Telematics systems
Languages: C · C++20 · Lua · TypeScript · JavaScript · Node.js
Embedded and Low-Level: Embedded software · Native desktop software (Windows) · Systems programming · Firmware analysis · Device behavior analysis · Hardware-software interaction · Driver-level debugging · Binary analysis
Reverse Engineering: IDA Pro · Ghidra · Static analysis · Dynamic analysis · Protocol reconstruction · State-machine analysis · Windows binary analysis (PE) · Linux binary analysis (ELF) · Undocumented system analysis
Product and Backend: REST APIs · Node.js · Next.js · Docker · Self-hosted systems · Multi-tenant SaaS architecture · Data integration · Operational dashboards

Selected Side Projects

Independent products built outside my core diagnostics work, in my own time.

BigBro.dll
Game Security / Anti-Cheat · 2025
An open-source, ring-3 anti-cheat SDK for game developers, delivered as a single C++20 DLL with native tamper detections and a sandboxed JavaScript rule engine.
Creator and Maintainer
C++20 · Windows · Anti-cheat · Direct syscalls · Cryptography · Duktape / JavaScript
DepozitOps
Field Operations Software · 2026
A B2B operations platform designed for deposit return system operators, covering field discovery, task management, route planning and operational visibility.
Software Engineer
Next.js · Node.js · TypeScript · Geospatial data · Operational analytics · Docker
Sila Road
Mobile Travel Safety · 2025
A mobile journey safety application for long-distance road travellers, featuring live location sharing, convoy tracking, stop alerts, SOS and arrival notifications.
Product Developer
Mobile application · Live location · Push notifications · Node.js · TypeScript
Denemingo
Education Technology · 2025
A stateless AI-powered exam engine for analysing question banks, generating assessments and evaluating student performance. Rebranded from SIN-AV.
Founder and Lead Developer
Next.js · Node.js · TypeScript · AI/LLM integration · REST APIs

All work →

Open Source

Selected reverse engineering and Windows-internals tooling. These are research and side projects, separate from the products above.

rememex
Rust · Semantic Search · MCP · Local-first
Semantic search for local files that finds results by meaning rather than keywords, across 120+ file types with OCR and an MCP server for AI agents, entirely on-device.
processhacker-mcp
C++ · Windows · MCP · Debugging
An MCP server that turns Process Hacker's live process, module and memory view into a tool surface an AI agent can read and act on while debugging.
ThreadIn
C++ · Windows · Reverse Engineering
Freezes target threads externally or internally while avoiding common SuspendThread detections, and exposes thread register state from a start address.
undocall
C++ · Windows · Reverse Engineering
Reverse engineering of undocumented Windows API surfaces, exposing internal calls for analysis.
ii-importer
C++ · Loader · Windows
Header-only runtime library for dynamically importing functions without static linkage.
WinLRPC-Hunter
C++ · Windows · RPC
Scanner and enumerator for Windows Local RPC endpoints and interfaces.
PrettyFork
C++ · CMake · Tooling
A tidy, opinionated C++ / CMake project layout used as a starting point for new tools.