Ujian Penembusan Jobs

Job Posting: Security Audit & Remediation – Project: – Security Audit & Remediation We are looking for an independent security-focused developer to verify and complete the security work on our platform (website, backend, iOS app, Android app). What has been done: · A full security audit was completed by a previous freelancer (49 findings – critical, high, medium, low). · Another developer has implemented fixes for many critical and high-severity issues: SQL injection, payment bypass, data leaks, stored XSS, chat access control, invoice IDOR, session cookies, CORS, MD5→bcrypt migration, database/Stripe key consolidation, blocking old code, and more. · These fixes have not been independently verified. What needs to be done: ·...

More details: What type of security testing do you require? Both Which areas of the ecommerce website do you want to prioritize for security testing? Payment gateway, User authentication, Database Do you have any specific compliance standards the website needs to meet? PCI DSS

I need an external, black-box penetration test carried out against three separate /24 IPv4 ranges that power our public-facing web applications, email servers, and SIP services. The exercise must satisfy our compliance requirements, so the methodology, evidence gathering, and final reporting all have to stand up to an audit review. Here’s what I expect: • Reconnaissance, vulnerability discovery, and controlled exploitation performed strictly from an external perspective—no inside credentials will be provided. • Clear scoping and scheduling so the assessment covers every live host across the three networks without disrupting production traffic. • A written report that prioritises findings by risk, maps them to relevant compliance controls, and includes reprod...

正文： 做外贸的朋友，如果碰到客户要求走S2S、KTT或者涉及MT103这类付款方式，自己又没有渠道对接的，可以私信我。 我这边有跨境结算渠道，可以处理这类付款方式的对接和协调。不收前期费用，成不成看具体业务。 有需要的站内私信，或者留个联系方式，我加你。 1 Title: Seeking Elite Cybersecurity Expert – Verifiable Track Record Required Description: We are looking for a top-tier cybersecurity expert for a potential long-term collaboration. Who we are looking for: · Advanced expertise in cybersecurity, penetration testing, or security research · Must be able to provide verifiable case examples, such as: · CVE numbers or published vulnerability research · Bug bounty platform records (HackerOne, Bugcrowd, etc.) · Security conference talks or published technical write-ups · Red team / penetration testing engagements with verifiable references · Relevant...

We are launching a new web application. It is to help hosts manage events. It is a small application (first release) with a form for host to create, share the link, allowing guests to respond. Also there are email notifications. The requirements are not explicitly specified. Tester will have to understand the functionality and test. There is a SQL server backend application, hosted on Godaddy. Tester must test for security risks, vulnerability, unauthorised access, encryption, confidentiality, leakages, cyber security / penetration. Tester will also have to find out issues with coding standards, cookies, encryption in data exchange to ensure that plain data is not saved or transferred. The application is mobile/desktop/devices compatible. And needs to be tested on those. Tester will ...

Ich plane eine professionell wirkende Website, die sich komplett um PenTests und Cybersicherheits­analysen dreht und speziell Unternehmen adressiert. Der Kern der Seite soll ein Modul sein, mit dem Firmen direkt eine detaillierte Analyse anfordern können. Ergänzend dazu brauche ich einen leicht zu pflegenden Bereich für Blogs und Artikel, in dem ich Best-Practice-Beiträge veröffentliche, sowie klare Dienstleistungs­beschreibungen, über die Interessenten schnell verstehen, welche PenTest- und Beratungs­pakete ich anbiete. Responsive Umsetzung, saubere Performance-Optimierung und eine intuitive Oberfläche für meine Zielgruppe sind mir wichtig. Ein CMS (z. B. WordPress, Statamic oder ein vergleichbar flexibles Framework) ist willkommen, s...

Our in-house team is wrapping up a custom lending portal that consolidates every stage of the loan lifecycle and provides separate dashboards for investors, borrowers, and brokers. Because the platform stores and exchanges highly-sensitive documents—personal IDs, financial records, and legal agreements—I need an independent specialist to run a single, thorough security review right before we move to production. My top priority is verifying that data encryption is rock-solid at rest and in transit. In addition, each role (investor, borrower, broker) has its own workflow, so you’ll need to confirm that our access-control logic keeps information strictly segregated. What I expect from you • Pen-test and code-level review focused on encryption implementation (TLS, ke...

I want to create a professional mock client project for my cybersecurity portfolio. The project should represent the type of Web Application Security Assessment service I plan to offer on freelance platforms such as Upwork, Freelancer, Mostaql, and Khamsat. Project Title: Web Application Security Assessment & Vulnerability Report Project Description: Create a realistic, professional cybersecurity assessment project for an authorized web application in a legal training environment. The goal is to simulate a real client requesting a security assessment of their web application. The project should demonstrate practical skills in web security testing, vulnerability identification, documentation, and professional reporting. Requirements: * Use Burp Suite and Nmap for security testing. ...

I need a review and court admissible report regarding evidence of malware infections obtained through EIFT backups and Amnesty MVT scans, including iOS-specific system files showing Operation Triangulation spyware. Key Requirements: - Analyze executable files (.exe, .dll, .bat) - Focus on spyware detection and analysis - Proficiency in iOS system file interpretation Ideal Skills: - Cybersecurity expertise - Experience with malware and spyware analysis - Familiarity with iOS operating systems and file structures - Strong analytical and reporting skills Please provide samples of previous work in malware analysis and relevant qualifications.

I’m assembling a small toolkit to speed up penetration-testing engagements and want lean, well-documented scripts in both JavaScript (browser or Node) and Python. The focus is offensive OSINT: harvesting publicly available data, mapping an organisation’s web surface, and producing quick proof-of-concept exploits or reports that I can drop straight into an assessment. Core scope – Automate open-source intelligence collection (DNS, subdomains, metadata, common misconfigs). – Chain findings into actionable steps that demonstrate real-world impact, not just raw data. – Keep each script portable: zero external dependencies when reasonable; otherwise pin versions and explain installs. – Provide clear in-line comments so I can tweak payloads during liv...

I have a small web-based application that needs its security posture checked right away. The goal is to build an automated suite that performs penetration-style tests each time the app is deployed, flagging anything that could be exploited before it reaches production. Scope – The work is limited to security testing; I do not need functional or performance checks at this stage. – Within security, the emphasis is on penetration testing methods: automated discovery of common weaknesses (SQLi, XSS, auth bypass, misconfigurations) and clear proof-of-concept steps. Tech expectations Python with Selenium, Playwright, or a comparable headless browser tool is fine, and I’m open to OWASP ZAP or similar APIs if that speeds things up. Please wire the tests so they can be tri...

Mi móvil Xiaomi presenta signos claros de compromiso. Un informe de seguridad externo confirmó que hay acceso remoto activo, software modificado y un perfil MDM que otorga control total del dispositivo. Busco a un hacker ético que pueda: • Examinar a fondo el firmware, las apps instaladas y los perfiles de administración (MDM) para localizar cualquier puerta trasera. • Eliminar o neutralizar el software modificado y deshabilitar el control MDM sin perder datos críticos. • Cerrarme el acceso remoto y asegurar la integridad del sistema, incluyendo bootloader, recovery y capas de MIUI. • Entregarme un informe claro con hallazgos, pasos realizados y recomendaciones para mantener el teléfono protegido. Trabajo 1...

Submission Type Vulnerability Disclosure / Bug Bounty Submission Submission Category Mobile Security — Zero-Click Exploitation Severity Classification Critical (CVSS 9.0–10.0) 1. Submission Summary This submission describes a discovered zero-click attack chain affecting mobile messaging applications on both iOS and Android platforms. The vulnerability allows an attacker to compromise a target device without any user interaction. This document serves as the formal description for researchers, security teams, and bug bounty programs to evaluate, reproduce, and remediate the reported issue. Submitted by: [Researcher Name / Handle] Contact: [Secure Email / PGP Key] Date of Discovery: [Date] Disclosure Type: Coordinated / Responsible Disclosure 2. Vulnerability Overview What wa...

I want to learn how to fix a real infected website. You will need to provide the infected website. Controlled environment is ok but continued work may be given if you provide real infected websites over a controlled environment. PHP based systems like laravel and Wordpress preferred. In your response give an example of an infected website you fixed, explain the situation. I only need an hour of your time for now but if I like your work I may give you more work. Preference will be given to real natural responses to this ad over AI responses.