<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://onurcangenc.com.tr</loc>
<changefreq>weekly</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/research</loc>
<changefreq>daily</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/about</loc>
<changefreq>monthly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/inside-the-noise-what-my-linux-honeypot-captured-in-seven-days</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/my-honest-review-on-c-agaipen-exam-writeup</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/from-a-boring-turkish-literature-class-to-rce-mautic-ssti-via-twig-themes-cve-2026-9558</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/approaching-the-pareto-frontier-in-university-life</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/ai-red-teamer-to-mechanist-the-identity-gap-few-talks-about</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/security-testing-on-senior-year-mobile-app</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/closetmate-dast-ai-prompt-injection-otp-bypass</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-topology</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-greenhorn</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-bastion</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-valentine</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-curling-joomla-rce-to-curl-config-file-abuse</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/cve-2026-34156-vm-sandbox-escape-to-rce-in-nocobase</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-beep</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/applying-ethical-theories-in-responsible-disclosure-program</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-irked-writeup-unrealircd-backdoor-to-root-via-suid-abuse</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-cicada-from-password-spraying-to-token-abuse</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-bank</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/cve-2025-60507-moodle-geniai-plugin-v2-3-6-xss-via-pdf-upload-prompt-injection</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/idor-in-moodle-openai-chat-block-block_openai_chat-proof-of-concept-poc-cve-2025-60511</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/cve-2025-60506-stored-cross-site-scripting-xss-in-moodle-pdf-annotator-plugin-v1-5-release-9</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/cve-2025-57520-stored-xss-in-decap-cms-3-8-3</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-nibbles-file-upload-to-root</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-devvortex-from-joomla-info-disclosure-to-root</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-bounty-file-upload-to-system-via-chimichurri</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/i-asked-an-ai-about-its-security-policies-it-gave-me-the-api-key</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/breaking-an-ai-powered-shell</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-blocky</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-keeper-writeup-how-a-danish-dessert-unlocked-root-access</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-knife-php-8-1-0-dev-supply-chain-backdoor-rce-to-root</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-broker-writeup</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/my-c-ai-mlpen-exam-journey</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-bashed-writeup-from-phpbash-webshell-to-root-via-cron-job-abuse</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-mirai-default-creds-pi-hole-usb-forensics</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-shocker-rce-via-cgi-bin-perl-privesc</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/cross-detector-inconsistency-in-ai-text-detection-a-benchmark-study-with-hybrid-evasion-techniques</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-sense-hacking-the-firewall</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-arctic-remote-command-execution-to-juicypotato-privesc</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://onurcangenc.com.tr/blog/htb-return-ldap-credential-theft-to-service-hijacking</loc>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
</urlset>
