<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
  <url>
    <loc>https://darkartssecurity.co/blogs/news/idor-isnt-dead-how-we-leaked-a-major-phone-providers-entire-database-for-3k</loc>
    <lastmod>2026-05-01T16:44:02-04:00</lastmod>
    <changefreq>weekly</changefreq>
    <image:image>
      <image:loc>https://cdn.shopify.com/s/files/1/0783/4923/8509/articles/Untitled_design_6_cd5d6ff4-2721-4043-afcd-73b45a04def0.png?v=1777668242</image:loc>
      <image:title>IDOR Isn&apos;t Dead... How We Leaked A Major Phone Provider&apos;s Entire Database For 3k</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://darkartssecurity.co/blogs/news/symfony-profiler-in-production-how-one-forgotten-debug-endpoint-almost-handed-me-full-account-takeovers-at-a-major-telecom</loc>
    <lastmod>2026-05-01T16:41:55-04:00</lastmod>
    <changefreq>weekly</changefreq>
    <image:image>
      <image:loc>https://cdn.shopify.com/s/files/1/0783/4923/8509/articles/Untitled_design_6_24e359e1-6aa0-4fc6-8ee5-12eda901229b.png?v=1777668115</image:loc>
      <image:title>&quot;Never Enable in Production&quot; – They Did It Anyway...</image:title>
    </image:image>
  </url>
</urlset>
