Bug bounty hunter and security researcher based in Türkiye.
I build custom recon automation to hunt vulnerabilities at scale across thousands of targets simultaneously.
NASA — Vulnerability Disclosure Program
Discovered a P2-severity Blind Stored XSS in mission-critical NASA infrastructure.
Awarded a Letter of Appreciation · Inducted into the NASA Security Hall of Fame
30+ high & critical severity vulnerabilities disclosed across private sector organizations.
| Organization | Findings |
|---|---|
| Kamyoon | SQLi · Stored XSS · IDOR · Improper Access Control · 403 Bypass · AWS S3 Exposure |
| Ege Yurt Grup | SQLi · Stored XSS · IDOR · Improper Access Control · 403 Bypass · AWS S3 Exposure |
Web App Security XSS · SQLi · SSRF · IDOR · Auth Bypass · SSTI · Business Logic
Recon & OSINT Subdomain Enum · Asset Discovery · JS Analysis · Cloud Exposure
Automation Custom pipeline — thousands of targets, parallel distributed scanning
CVE Hunting Template-driven, fast triage on newly published disclosures
Python Bash Go — nuclei httpx subfinder ffuf dnsx katana — Axiom PostgreSQL Linux
akif@hackermail.com