2026-02-25APIs: From Subroutine Libraries to Zero Trust — A Technical History (external)API · Architecture · Security
2026-02-25 API · Architecture · Security
APIs: From Subroutine Libraries to Zero Trust — A Technical History (external)hackwith.me — session
$ whoami
Adil Burak Şen
a.k.a. 0racLe
Senior Application Security & Red Team Engineer
$ cat ./signal.txt
OSCP+ certified Application Security & Red Team Engineer with 8+ years across banking, telecom, aviation, insurance, and e-commerce. Bugcrowd Top 100 (2018) with 400+ reports submitted, 150+ validated. Published CVE (CVE-2026-31974). Hands-on across penetration testing, API security, threat modeling, secure SDLC, DevSecOps automation, and AI/LLM security.
$ ▍
# Selected Disclosure
CVE-2026-31974 (external)
SSRF in OpenProject — OpenProject
MediumReporter2026
Server-Side Request Forgery in OpenProject. Coordinated disclosure with the OpenProject security team; fix merged upstream in v17.2.0.
# Featured Project
2025 / active
CVE-2025-25257 Exploit Tool (external)Public exploit tool for pre-authentication SQL injection in Fortinet FortiWeb Fabric Connector (CVSS 9.8). Detects vulnerable instances and demonstrates impact.
# Recent Writingview all →
2025-04-10 Society · Tech · AI
The Age of Insecurity: Human Nature in a Tech-Driven World (external)2025-04-06 Personal · Growth · Reflection
How long has it been? (external)$ status --availability
Open to Europe / UK / Remote
Istanbul, Turkey
Istanbul, Turkey
$ status --availability Open to Europe / UK / Remote — Istanbul, Turkey