<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://blog.veysel-xan.com/posts/i-came-for-rfi-i-left-with-ssrf-xss/</loc>
<lastmod>2026-06-17T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://blog.veysel-xan.com/posts/bank-otp-bypass/</loc>
<lastmod>2026-06-20T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://blog.veysel-xan.com/categories/</loc>
<lastmod>2026-06-20T18:04:25+00:00</lastmod>
</url>
<url>
<loc>https://blog.veysel-xan.com/tags/</loc>
<lastmod>2026-06-20T18:04:25+00:00</lastmod>
</url>
<url>
<loc>https://blog.veysel-xan.com/archives/</loc>
<lastmod>2026-06-20T18:04:25+00:00</lastmod>
</url>
<url>
<loc>https://blog.veysel-xan.com/about/</loc>
<lastmod>2026-06-20T18:04:25+00:00</lastmod>
</url>
<url>
<loc>https://blog.veysel-xan.com/</loc>
</url>
<url>
<loc>https://blog.veysel-xan.com/tags/ssrf/</loc>
</url>
<url>
<loc>https://blog.veysel-xan.com/tags/xss/</loc>
</url>
<url>
<loc>https://blog.veysel-xan.com/tags/recon/</loc>
</url>
<url>
<loc>https://blog.veysel-xan.com/tags/bug-bounty/</loc>
</url>
<url>
<loc>https://blog.veysel-xan.com/tags/ssr/</loc>
</url>
<url>
<loc>https://blog.veysel-xan.com/tags/otp/</loc>
</url>
<url>
<loc>https://blog.veysel-xan.com/tags/authentication/</loc>
</url>
<url>
<loc>https://blog.veysel-xan.com/tags/rate-limiting/</loc>
</url>
<url>
<loc>https://blog.veysel-xan.com/tags/jwt/</loc>
</url>
<url>
<loc>https://blog.veysel-xan.com/tags/burp-suite/</loc>
</url>
<url>
<loc>https://blog.veysel-xan.com/tags/broken-access-control/</loc>
</url>
<url>
<loc>https://blog.veysel-xan.com/categories/bug-bounty/</loc>
</url>
<url>
<loc>https://blog.veysel-xan.com/categories/web-security/</loc>
</url>
</urlset>
