$ profile.summary

About me

I am a computer engineering student focused on web and application security, penetration testing, and responsible disclosure.

I spend much of my time researching web and network security and reporting spam, fraud, and malicious infrastructure.

A vulnerability I responsibly disclosed at my university brought visibility to my work and led to an internship opportunity at my faculty.

I help manage BugHane Academy and use this blog to keep technical knowledge concise, verifiable, and practical.

“Cybersecurity is not a hobby; it is a responsibility.”

Basri Akkaya conducting security research in a dark workspace — security.researchlearn · test · disclose

$ cat verified_records.log

Hall of Fame & CVE Records

Publicly verifiable security research, responsible disclosure, and recognition records — grouped for quick review.

13 records3 CVE10 HOF

Hall of Fame

Recognition received for responsibly reported and validated security findings.

Official institution list

HOF2027IMPORTANT · $2,500

Microsoft MSRC — 2027 Special Mention

Microsoft validated a finding in an unauthorized file-upload flow that could enable stored XSS as Important / Spoofing and awarded a $2,500 bounty.

Spoofing
Stored XSS

Public recordView official record LinkedIn post

Official institution list

HOF2026

ASUS PSIRT — 2026 Hall of Fame

August 2026 Hall of Fame recognition published as “Basri Akkaya (realkage)” following coordinated vulnerability disclosure with ASUS PSIRT.

A02:2025 Security Misconfiguration

Public recordView official record

Institutional letter

HOF2026HOF · LOR

University of Oslo / UiO-CERT — 2026 Recognition

Official recognition from UiO-CERT for identifying and reporting multiple vulnerabilities across University of Oslo services and websites.

Information Disclosure

Public recordInstitution website

Public platform profile

HOF2026HOF · LOR pending

NASA VDP — 2026 Hall of Fame

Two P1 (critical-priority) security submissions accepted under the NASA Vulnerability Disclosure Program: path traversal and SQL injection. The Bugcrowd Hall of Fame entry is public; the Letter of Recognition (LOR) is pending.

Path Traversal
SQL Injection

Public recordView official record

Public platform profile

HOF2026HOF · P3

U.S. DHS VDP — 2026 Hall of Fame

Bugcrowd Hall of Fame recognition for a P3 security finding accepted on the *.FEMA.GOV target on 24 August 2026.

Sensitive Data Exposure
Disclosure of Secrets

Public recordView official record

Official institution list

HOF2026

University of Twente — 2026 Hall of Fame

Official Responsible Disclosure Hall of Fame recognition as “Basri Akkaya (realkage)” for one accepted security report in 2026.

Broken Access Control
IDOR

Public recordView official record

Official institution list

HOF2026

Arçelik Türkiye — 2026 Hall of Fame

Official Vulnerability Disclosure Hall of Fame recognition as “Basri Akkaya (realkage)” following a validated security finding reported as High severity (CVSS 7.5).