Testare de penetrare Jobs

I need a seasoned ethical hacker to run a full-scope penetration test against my live website. The priority is to uncover weaknesses that could expose our database or allow logic flaws in the web application to be exploited. All findings must be mapped to PCI DSS requirements so I can demonstrate compliance to my acquiring bank. Here is what I expect: • A controlled black-box test using industry-standard toolsets such as Burp Suite, OWASP ZAP, sqlmap, nmap, plus any custom scripts you rely on. • No disruption to production; schedule your active exploits during an agreed maintenance window and keep traffic levels reasonable. • A written report that ranks every issue by risk and includes reproduction steps, screenshots or PoC code, and clear remediation guidance. &bull...

I'm seeking a skilled penetration tester to evaluate the security of our network infrastructure. The testing should cover: - Firewalls and Routers - Wireless Networks - Servers and Endpoints Ideal candidates should have: - Proven experience in network penetration testing - Strong knowledge of security protocols and vulnerabilities - Relevant certifications (e.g., CEH, CISSP) - Ability to provide a detailed report with findings and recommendations Please share your experience and approach to this task.

I need a skilled ethical hacker to carry out a focused penetration test on my production web application. The goal is to uncover any exploitable weaknesses before they become a problem, with particular attention to: • Data validation • Session management Once we sign an NDA I’ll share architecture notes, limited credentials, and a staging URL. Please stay within scope, avoid destructive techniques, and document every step so I can reproduce the findings. Deliverables I expect – A concise executive summary of overall risk – Detailed, step-by-step proof-of-concept for each issue discovered – Practical remediation advice ranked by priority – A retest summary after fixes (short verification pass) Tools such as Burp Suite, OWASP ZAP, or yo...

Security Audit and Penetration Testing for Web and Mobile Application Project Overview I am looking for an experienced security auditor and penetration tester to perform a comprehensive security audit of a web application and mobile application. The application handles sensitive user and platform data through a backend database. The main objective of this project is to identify security vulnerabilities and, most importantly, verify that unauthorized users cannot access data or functionality that they are not permitted to access. The primary focus is on backend authorization, API security, database access control, authentication, privilege escalation, and protection against unauthorized data access. Main Security Requirement I need to verify that a normal user cannot access another us...

I need a comprehensive vulnerability assessment and penetration test performed on my production web application. Because I can grant limited internal knowledge—such as architecture diagrams, sample credentials, and API documentation—I would like the engagement run as a grey box exercise rather than pure black-box reconnaissance. 1 External VA/PT - 4 public IPv4/region - Full manual validation through WAF/security stack 2 Internal VA/PT - 10 segments / 250 live IPs - Credentialed + non-credentialed testing 3 Web Application — Virtual Trust - 1 app / 20 modules / 10 roles - Grey/white box + targeted production validation 4 Web Application — CrimsonLogic - 1 app / 20 modules / 10 roles 5 API Security 50 endpoints base - Full OWASP API Top 10 + business logic 7 Confi...

Înregistrează-te sau Conectează-te pentru a vedea detaliile.

I’m ready to invite an experienced ethical hacker to run a full-scope security assessment on my live application. Your mission is to simulate real-world attacks, identify every meaningful vulnerability, prove exploitation with clear evidence, and outline practical remediation steps. Here’s what I need from you: • A mutually agreed test plan that follows industry standards such as OWASP and NIST, tailored to the specific tech stack I will disclose once an NDA is in place. • Active exploitation of discovered weaknesses (no destructive methods) and thorough validation of each finding. • A concise executive summary plus a detailed, step-by-step technical report that includes risk ratings, reproduction steps, impacted components, and prioritized mitigation advice...

Looking for an experienced developer/security tester to analyze an OTP-based login system on a website that I am authorized to test. I need someone who can review the website’s OTP authentication workflow, identify security weaknesses, and suggest a secure way to streamline the authorized login process. Requirements: OTP login workflow analysis Website/API security testing Authentication flow review Security vulnerability assessment Clear report of findings Only authorized security testing. No unauthorized access or credential bypass.

I run a custom-built e-procurement platform (PHP, Bootstrap front-end, MySQL) hosted on a private AlmaLinux VM and administered through DirectAdmin. Before pushing new features live, I need a thorough penetration test that zeroes in on web-application weaknesses. Please quote separately for a Black-Box assessment (no internal knowledge) and a Grey-Box assessment (limited credentials or code snippets provided). The goal is to understand how each testing style changes the risk picture and the remediation roadmap. Scope of the engagement • Authentication & authorization • Input validation & sanitization • Session management You may explore any additional vectors necessary to fully cover those three areas, but infrastructure, network layers, and the database e...