I will do web application and API penetration testing with owasp report


About this gig
Launching a SaaS, AI tool, or custom web application? Automated scanners miss up to 70% of critical business logic flaws and API vulnerabilities.
I provide manual and automated Web Application and REST/GraphQL API Penetration Testing following the industry-standard OWASP Testing Guide to ensure your platform is secure and investor-ready.
My Testing Methodology Includes:
- Broken Access Control (IDOR) & Privilege Escalation: Ensuring users cannot access admin or other users' data.
- Injection Flaws: SQLi, NoSQLi, Command Injection, and XSS.
- API-Specific Risks: Rate limiting, JWT token manipulation, and excessive data exposure.
- Session Management & Authentication: Testing login flows, 2FA, and password reset logic.
Why Choose This Gig?
- 100% Safe, Non-Destructive Testing (Staging or Production)
- Clear Proof-of-Concept (PoC) with CVSS Risk Ratings
- Developer-Friendly Remediation Code Snippets
- Strict Confidentiality (Happy to sign an NDA)
Send me a message with your tech stack and scope, and I will reply within 15 minutes!
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Mohib UL Hassan
Vulnerability Assessment and Ethical hacking
- FromPakistan
- Member sinceJan 2022
- Avg. response time1 hour
Languages
English, Urdu

