I will do penetration testing and vulnerability scanning in your website
About this Gig
Most penetration testers run a scanner, export the PDF, and call it a day. That's not what you're getting here.
Hi, I'm SHAHAZ, certified pentester, 2 years testing real-world web applications for businesses that can't afford to get breached.
WHAT I LOOK FOR:
- OWASP Top 10 the classics that still take down big companies
- Injection flaws SQL, NoSQL, LDAP, XML
- Broken auth, session hijacking & access control bypass
- API vulnerabilities & endpoint abuse
- RCE, LFI, RFI, SSRF, XXE
- All XSS types DOM, reflected, stored
- IDOR, file upload flaws & business logic bugs
- 100+ classes, every one tested manually
MY TOOLKIT:
Burp Suite Pro | Acunetix Premium | Nessus Pro | Custom exploits | Manual Checks
WHAT YOU GET:
- Clear severity ratings Critical to Low
- CVSS scores & CVE references
- Working PoC for each vulnerability found
- Screenshots & video proof
- Exact remediation steps your dev team can act on
Let's secure your application before someone else exploits it. Let's talk, Message me now.
My Portfolio
FAQ
Can we have a zoom/meet meeting?
Absolutely! I would be glad to discuss with you on your project (No charge for this, it's completely free for you) !!
What methods & tools do you use?
I believe I can find hundreds of vulnerabilities without touching any tools, so I don't need any tools to find vulnerabilities ! But to enhance my work, providing 1000% accurate results, save time & ultimately for the client's satisfaction, I combine both manual & automated methods !
Can I see your "PDF Report" format?
Of course, message me and I'll send you a copy of my pdf report that I provide after completing the penetration test !
Will my website face downtime during the test?
No, I use safe, controlled techniques, High-impact tests are done with your permission only !
What kind of vulnerability will you detect?
I will detect OWASP top 10 ,Sans top 25 with thousands of critical vulnerabilities that must need to be solved!
Do you perform legal penetration testing?
Yes, I only test websites that you own or have written permission !
Do you test WordPress websites?
Yes, I perform on all types of websites !

