Ver categorias
Explorar
Fiverr Pro
Português
$
USD
I will do web application penetration testing and security audit vapt
Rayhan
Sobre este Serviço
An undetected security loophole can ruin your business and leak user data. As a Certified Ethical Hacker (CEH), I provide a professional web application penetration test (VAPT) to identify and help you patch critical flaws before malicious actors exploit them.
I perform manual deep-dives to uncover complex logic flaws, authorization bypasses, and data leaks that traditional automated scanners completely miss.
️Testing Scope (OWASP Top 10):-
- Exploitation: Manual testing for SQLi, XSS, CSRF, IDOR, and RCE.
- Session Security: Broken authentication, cookie safety, and session hijacking.
- Business Logic: Price manipulation and administrative data bypass.
- Data Leakage: Exposed API keys and server-side information disclosure.
What You Receive:-
- VAPT Report: Executive summary and technical vulnerability breakdown classified by severity.
- Proof of Concept (PoC): Screenshots and exact steps to reproduce the vulnerabilities.
- Remediation Guide: Clear, actionable code-level instructions on how to patch the bugs.
Note: I only test with explicit written permission from the asset owner.
Secure your perimeter today!
Respeite os direitos de terceiros
Esteja atento ao fato que é contra as políticas do prestador da Fiverr incluir temas, modelos ou outros elementos no trabalho entregue que infrinjam os direitos de terceiros ou leis aplicáveis. Leia mais em nosso Guia de Criação Digital Responsável.
Conheça mais sobre Rayhan
Rayhan
Cybersecurity Specialist and Certified Ethical Hacker
- A partir deBangladesh
- Membro desdemai. de 2025
- Responde em aprox.:1 hora
Idiomas
Inglês, Hindi, Bengali
I am Siam Rayhan, a Certified Ethical Hacker and Cybersecurity Specialist certified by Arena Web Security. I specialize in offensive security, manual penetration testing, and advanced vulnerability exploitation.
My core hacking services:
• Web VAPT: Exploit & patch critical OWASP Top 10 flaws.
• WordPress Security: Backdoor hunting, malware removal, & system hardening.
• OSINT: Open-source intelligence & digital footprint risk analysis.
I secure your assets by attacking them first. Let's lock down your systems!
Perguntas frequentes
What do you need from me to begin the penetration test?
I require the target URL, explicit written permission to test the asset, and (if applicable) a set of testing credentials (test accounts) so I can audit the authenticated pages and user roles inside your application.
Will the penetration test cause any downtime or disrupt my live website?
No. I conduct my assessments safely using controlled, low-impact methods to ensure your application remains stable and operational. If you prefer, I can also conduct the entire test on a staging or development environment instead of your live production site.
What standard or framework do you follow during the assessment?
My testing methodology is strictly aligned with the OWASP (Open Web Application Security Project) Top 10 framework, combining automated mapping with deep manual exploration to guarantee thorough coverage of logical and structural flaws.
Do you directly patch the code or fix the vulnerabilities you find?
No, I don't modify code directly. I provide a detailed remediation report with clear instructions on how to patch every flaw. Writing patches for custom backends introduces legal liabilities and is best handled safely by your development team using my step-by-step blueprint guide.
