Security Auditing Jobs

Tengo un servidor web Ubuntu alojado en Azure. Después de un ajuste en las reglas perdí todo acceso externo: no responden ni SSH (22) ni HTTP (80) ni HTTPS (443). Desde el portal de Azure todavía puedo entrar por consola de emergencia, así que la máquina está encendida; simplemente la capa de red o las reglas internas/externas están bloqueando el tráfico. Necesito que: • Analices y corrijas las Network Security Groups, reglas de firewall de la VM y cualquier configuración de iptables/ufw que impida estos puertos. • Restablezcas la autenticación SSH con claves existentes o, si fuera necesario, generes una nueva pareja y la dejes operativa. • Verifiques que el sitio web vuelve a ser accesible por HTTP...

Especialista en Ciberseguridad / Forense Digital – Detección y Análisis de Malware / Spyware en Windows (Remoto) Descripción: Busco un profesional con experiencia comprobable en análisis de malware, respuesta a incidentes o informática forense para auditar un equipo con sistema operativo Windows ante sospechas de software espía (spyware) o persistencia no autorizada. Objetivos del servicio: Realizar un triaje inicial y análisis de persistencia (tareas programadas, servicios, entradas de registro, extensiones). Analizar procesos en memoria y tráfico de red saliente para descartar conexiones C2 o exfiltración de datos. Identificar y aislar artefactos maliciosos si los hubiera (análisis estático/din&aacut...

I just need help with some personal tracking issue, so im dont know very well, but i think someone with ethical hacking or its just good with internet can help me.

I need a Flash-style TRC20 token built on the Tron blockchain that is both burnable and protected by multi-signature access. My priority is to have the contract coded, fully tested, and ready for deployment as quickly as possible without compromising security or adherence to the official TRC20 standard. Please write the contract in Solidity, comment it clearly, and supply a brief README so I can redeploy or verify it myself later. A small, self-contained test script (TronBox, Hardhat, or a comparable framework) that proves the burn function and the multi-sig requirement are working will speed up my review. Deliverables: • Auditable Solidity source code implementing TRC20 with burnable capability and multi-sig control • Compiled bytecode, ABI, and deployment steps • A s...

OSCP-Certified Technical Reviewer Needed Looking for 1 or 2 OSCP-certified penetration tester for occasional project-based technical QA. The primary assessment work is handled internally. Your role will mainly involve reviewing selected findings, validating technical reasoning, checking severity, and reviewing final reports before delivery. No client meetings. No full-time commitment. Requirements: Current OSCP or OSCP+ Certification verification Willingness to sign an NDA Ability to review penetration-testing findings and reports Work is paid per agreed review task. Please send your OSCP verification, a short summary of your experience, and your expected rate for a few hours of technical review.( Think 2-3 hours per task)

My home network has been compromised. I need an expert to: - Diagnose security breaches - Identify and remove unauthorized devices - Secure my Wi-Fi and connected devices - Provide guidance on protecting myself from future attacks Ideal Skills & Experience: - Strong background in cybersecurity - Experience with home network security - Ability to explain technical concepts clearly - Trustworthiness and professionalism Please help me regain control of my digital life. I do suspect that the individual may have used something like apple buisness or cisco technologies to gain complete access and control over everything I do on a daily basis. Including revoking my access to my own information. I need someone who can look beyond the curtain and really understand that it is not just the dev...

I have an enterprise-grade, multi-vendor SaaS marketplace that is feature-complete on paper but still awaiting a green light for production. Before we release, I need an experienced Technical Project Manager or Technical Product Manager to give the entire platform a hard, independent review and drive it all the way to an unequivocal “ready” or “not ready”. Scope you will own • Perform a line-by-line review of the build against the existing SRS, challenging developers whenever implementation drifts from spec. • Orchestrate milestone planning and daily follow-ups with the current dev team so fixes, retests and regressions stay on schedule. • Design and execute full UAT: test every workflow, log defects in detail, and verify fixes. The goal is sim...

More details: Can you clarify the type of work you need done? Retrieve or access specific data What type of data are you trying to retrieve or access? Emails What email service provider does the account use? Gmail

An ethical hacker Needs for managing my social media account and get some details mainly my instagram dms and request Only apply if you have good experience and certificated in this field

I need a seasoned ethical hacker to run a full-scope penetration test against my live website. The priority is to uncover weaknesses that could expose our database or allow logic flaws in the web application to be exploited. All findings must be mapped to PCI DSS requirements so I can demonstrate compliance to my acquiring bank. Here is what I expect: • A controlled black-box test using industry-standard toolsets such as Burp Suite, OWASP ZAP, sqlmap, nmap, plus any custom scripts you rely on. • No disruption to production; schedule your active exploits during an agreed maintenance window and keep traffic levels reasonable. • A written report that ranks every issue by risk and includes reproduction steps, screenshots or PoC code, and clear remediation guidance. &bull...

I'm seeking a skilled penetration tester to evaluate the security of our network infrastructure. The testing should cover: - Firewalls and Routers - Wireless Networks - Servers and Endpoints Ideal candidates should have: - Proven experience in network penetration testing - Strong knowledge of security protocols and vulnerabilities - Relevant certifications (e.g., CEH, CISSP) - Ability to provide a detailed report with findings and recommendations Please share your experience and approach to this task.

I need a skilled ethical hacker to carry out a focused penetration test on my production web application. The goal is to uncover any exploitable weaknesses before they become a problem, with particular attention to: • Data validation • Session management Once we sign an NDA I’ll share architecture notes, limited credentials, and a staging URL. Please stay within scope, avoid destructive techniques, and document every step so I can reproduce the findings. Deliverables I expect – A concise executive summary of overall risk – Detailed, step-by-step proof-of-concept for each issue discovered – Practical remediation advice ranked by priority – A retest summary after fixes (short verification pass) Tools such as Burp Suite, OWASP ZAP, or yo...

I need a CISA-, DISA- or CERT-In-qualified professional to steer our young insurance brokerage through every stage of the IRDA Cyber Security Audit required for account renewal. At present we have virtually no formal artefacts, so you will be building the full documentation suite from the ground up. Core items include our cybersecurity policies, incident-response plans, access-control procedures and any additional processes the audit checklist demands. You’ll be free to introduce industry-standard frameworks and tooling provided they satisfy IRDA guidelines. Once the documents are in place I also want your guidance during the actual compliance cycle—answering auditor queries, closing gaps, and keeping the material evergreen for future renewals. If you already work with an aut...

Security Audit and Penetration Testing for Web and Mobile Application Project Overview I am looking for an experienced security auditor and penetration tester to perform a comprehensive security audit of a web application and mobile application. The application handles sensitive user and platform data through a backend database. The main objective of this project is to identify security vulnerabilities and, most importantly, verify that unauthorized users cannot access data or functionality that they are not permitted to access. The primary focus is on backend authorization, API security, database access control, authentication, privilege escalation, and protection against unauthorized data access. Main Security Requirement I need to verify that a normal user cannot access another us...

I'm seeking a comprehensive pre-launch code audit for my React Native application. The focus areas are FlatList performance, Firestore query optimization, and Security Rules validation. All three are equally critical. Key Requirements: - React Native FlatList Performance: Analyze and optimize rendering of dynamic data to ensure smooth scrolling and reduced latency. - Firestore Query Optimization: Review and enhance composite queries with multiple conditions, ensuring efficient data retrieval and minimizing read operations. - Security Rules Validation: Audit current security rules for Firestore to ensure data protection and integrity. Ideal Skills and Experience: - Expertise in React Native, specifically with FlatList and performance optimization. - Strong knowledge of Firestore, esp...

I need a comprehensive vulnerability assessment and penetration test performed on my production web application. Because I can grant limited internal knowledge—such as architecture diagrams, sample credentials, and API documentation—I would like the engagement run as a grey box exercise rather than pure black-box reconnaissance. 1 External VA/PT - 4 public IPv4/region - Full manual validation through WAF/security stack 2 Internal VA/PT - 10 segments / 250 live IPs - Credentialed + non-credentialed testing 3 Web Application — Virtual Trust - 1 app / 20 modules / 10 roles - Grey/white box + targeted production validation 4 Web Application — CrimsonLogic - 1 app / 20 modules / 10 roles 5 API Security 50 endpoints base - Full OWASP API Top 10 + business logic 7 Confi...

Por favor, regístrate o inicia sesión para ver los detalles.

I’m ready to invite an experienced ethical hacker to run a full-scope security assessment on my live application. Your mission is to simulate real-world attacks, identify every meaningful vulnerability, prove exploitation with clear evidence, and outline practical remediation steps. Here’s what I need from you: • A mutually agreed test plan that follows industry standards such as OWASP and NIST, tailored to the specific tech stack I will disclose once an NDA is in place. • Active exploitation of discovered weaknesses (no destructive methods) and thorough validation of each finding. • A concise executive summary plus a detailed, step-by-step technical report that includes risk ratings, reproduction steps, impacted components, and prioritized mitigation advice...

Looking for an experienced developer/security tester to analyze an OTP-based login system on a website that I am authorized to test. I need someone who can review the website’s OTP authentication workflow, identify security weaknesses, and suggest a secure way to streamline the authorized login process. Requirements: OTP login workflow analysis Website/API security testing Authentication flow review Security vulnerability assessment Clear report of findings Only authorized security testing. No unauthorized access or credential bypass.