2026-09-12We Keep Updating AI, But Not the Abstractions Beneath It (external)AI · Architecture · Computing
2026-09-12 AI · Architecture · Computing
We Keep Updating AI, But Not the Abstractions Beneath It (external)hackwith.me — sessionlink: stable
$ whoami
Adil Burak Şen
a.k.a. 0racLe
Senior Application Security Engineer
$ cat ./signal.txt
Application security engineer with 10+ years in offensive and application security across banking, telecom, aviation, insurance and e-commerce. Web, API and mobile security testing, threat modeling and CI/CD security. Bugcrowd Top 100 (2018), 150+ validated vulnerabilities, credited for CVE-2026-31974 (OpenProject). OSCP+, eWPTx, eMAPT, CASP.
$ ▍
// Selected Disclosure
CVE-2026-31974 (external)
SSRF in OpenProject — OpenProject
LowReporter2026
Blind SSRF through webhooks and the SMTP test endpoint. Reported independently through the YesWeHack OpenProject program and credited in the advisory. Fixed in v17.2.0.
// Featured Project
2025 / active
CVE-2025-25257 Exploit Tool (external)Public exploit tool for pre-authentication SQL injection in Fortinet FortiWeb Fabric Connector (CVSS 9.8). Detects vulnerable instances and demonstrates impact.
// Recent Writingview all →
2026-02-25APIs: From Subroutine Libraries to Zero Trust — A Technical History (external)API · Architecture · Security
2026-02-25 API · Architecture · Security
APIs: From Subroutine Libraries to Zero Trust — A Technical History (external)2025-04-10 Society · Tech · AI
The Age of Insecurity: Human Nature in a Tech-Driven World (external)2025-04-06 Personal · Growth · Reflection
How long has it been? (external)$ status --availability
Open to Europe / UK / Remote
Istanbul, Turkey
Istanbul, Turkey
$ status --availability Open to Europe / UK / Remote — Istanbul, Turkey