<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://orhanyildirim.us</loc>
<lastmod>2026-03-01</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/about</loc>
<lastmod>2026-03-01</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/work</loc>
<lastmod>2026-03-01</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog</loc>
<lastmod>2026-03-01</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/gallery</loc>
<lastmod>2026-03-01</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/5-architectural-patterns-for-designing-mcp-tool-capabilities-in-2024</loc>
<lastmod>2026-01-25</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/advanced-static-and-hybrid-analysis-for-application-security-integrating-sca-ast-taint-propagation-and-object-dependence-graphs</loc>
<lastmod>2026-01-23</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/agentcore-browser-ai-agent-web-automation</loc>
<lastmod>2026-01-24</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/androidmanifestxml-a-pentesters-window-into-an-apps-soul</loc>
<lastmod>2026-01-02</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/blog</loc>
<lastmod>2025-03-17</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/breaking-down-dac-and-mac-in-android-security-a-hands-on-lab-for-pentesters</loc>
<lastmod>2026-01-25</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/building-a-256gb-ai-cluster-on-my-desk-connecting-two-nvidia-dgx-sparks-for-distributed-llm-inference</loc>
<lastmod>2026-03-01</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/components</loc>
<lastmod>2025-04-20</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/content</loc>
<lastmod>2025-04-18</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/iam-credential-harvesting-instance-metadata-service-imds-v1-vs-v2-exploitation-ve-token-hijacking-</loc>
<lastmod>2026-01-01</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/intent-hijacking-understanding-and-exploiting-a-hidden-android-threat</loc>
<lastmod>2026-01-23</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/localization</loc>
<lastmod>2025-04-15</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/mailchimp</loc>
<lastmod>2025-04-16</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/model-context-protocol-mcp-integrating-llms-how-it-differs-from-apis-and-cybersecurity-applications</loc>
<lastmod>2026-01-25</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/offensive-security-will-never-be-the-same-a-deep-dive-into-the-first-ai-driven-espionage-operation</loc>
<lastmod>2026-01-30</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/pages</loc>
<lastmod>2025-04-22</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/password</loc>
<lastmod>2025-04-17</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/seo</loc>
<lastmod>2025-04-14</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/styling</loc>
<lastmod>2025-04-21</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/the-assumerole-pitfall-cross-account-takeover-scenarios-and-the-confused-deputy-problem</loc>
<lastmod>2026-01-28</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/the-invisible-door-how-one-overlooked-setting-exposed-bank-customers-payee-data</loc>
<lastmod>2026-01-27</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/the-passrole-pitfall-exploiting-iam-wildcard-policies-for-aws-privilege-escalation</loc>
<lastmod>2026-01-29</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/the-power-and-perils-of-androidmanifestxml-in-mobile-application-security</loc>
<lastmod>2026-01-06</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/the-quiet-door-an-attackers-eye-view-of-a-leaky-android-activity</loc>
<lastmod>2026-01-22</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/blog/work</loc>
<lastmod>2025-04-19</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/work/automate-design-handovers-with-a-figma-to-code-pipeline</loc>
<lastmod>2024-04-01</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/work/autonomous-xss-detection-with-mcp-browser-using-agentic-ai-to-scan-and-exploit-web-vulnerabilities</loc>
<lastmod>2026-02-23</lastmod>
</url>
<url>
<loc>https://orhanyildirim.us/work/building-once-ui-a-customizable-design-system</loc>
<lastmod>2024-04-08</lastmod>
</url>
</urlset>
