I will perform API penetration testing with detailed report

Pakistan

I speak Urdu, Pashto, English

1 order completed

Certified Web App and API Penetration Tester

I am a certified penetration tester (eJPT, eWPT, eWPTX, ICCA) specializing in web application and API security. I help businesses secure their apps by testing for OWASP Top 10, authentication flaws, a...
About this Gig

Certified ethical hacker (eJPT, eWPT, eWPTX, ICCA + MIT) with 30+ bugs found on HackerOne & Bugcrowd. I provide authorized API security testing only ethical, legal, and white-hat. Explicit written permission and proof of ownership/authorization required before starting. No unauthorized access or illegal activities.

What you'll get:

  • Manual + automated testing of endpoints (REST/GraphQL)
  • Full coverage of OWASP API Top 10 (broken auth, IDOR, excessive data exposure, rate limiting, injection, etc.)
  • Business logic flaws, auth bypass, rate limit abuse, data leaks
  • Professional PDF report: CVSS risk ratings, screenshots/evidence, remediation advice

My process: Scope definition Recon & mapping Scanning Manual testing Reporting

Tools: Burp Suite Pro, Postman, custom scripts, industry standards.

Why me? Real bug bounty experience + hands-on platforms (HTB, TryHackMe, Juice Shop, CTFs).

Important: Share API docs/scope/PoC access first. For broader web app testing, check my main gig.

Message me to discuss your API let's secure it!

Testing application:

API

Development technology:

Java

PHP

Python

SQL

WordPress website

Device:

PC

Linux

My Portfolio

Related tags