4. Security & Compliance

Specializes in identifying and mitigating vulnerabilities in application business logic through systematic security testing methodologies.

Conducts ethical network penetration testing to identify and exploit security vulnerabilities in systems and infrastructure.

Specialized methodology for identifying and testing Server-Side Request Forgery (SSRF) vulnerabilities in web applications.

Specializes in identifying and testing security vulnerabilities in file upload mechanisms to prevent exploitation.

Performs security testing for Insecure Direct Object Reference (IDOR) vulnerabilities in web applications to identify unauthorized resource access risks.

Tests for LDAP injection vulnerabilities in directory services to identify and mitigate security risks in authentication systems.

Conducts comprehensive cloud security audits to identify vulnerabilities and ensure compliance with security standards.

Provides professional methodologies for identifying and testing Cross-Site Request Forgery (CSRF) vulnerabilities in web applications.

Tests web applications for XPath injection vulnerabilities to prevent unauthorized data access and enhance security posture.

Delivers structured security awareness training programs to educate employees on security best practices and compliance requirements.

Specializes in identifying and testing deserialization vulnerabilities to prevent security breaches in applications.

Systematically identifies, analyzes, and prioritizes security vulnerabilities in systems and applications to mitigate risks.

Provides structured methodologies for detecting, containing, and mitigating security incidents in enterprise environments.

Conducts security assessments on APIs to detect vulnerabilities and ensure secure communication protocols.

Provides methodologies for identifying and mitigating security vulnerabilities in containerized applications and their images.

Specializes in implementing Clerk's modern authentication solutions with WebAuthn, passkeys, and passwordless login for secure, user-friendly authentication flows.

Auth0 security specialist for implementing attack protection, MFA, token security, and compliance configuration.

Enables security pentesting of IoT devices through UART console interaction for device enumeration, vulnerability discovery, and root shell acquisition.

Decompiles Android APK files into readable Java source code for security analysis, vulnerability detection, and app behavior inspection.

Analyzes IoT network traffic to detect protocols and identify security vulnerabilities in device communications.

Scans networks to discover ONVIF cameras and WS-Discovery enabled IoT devices, aiding in security assessment and device inventory.

Unpacks, analyzes, and repackages Android APK files to extract resources, examine manifests, and analyze smali code for security assessment.

Scans ONVIF devices for security vulnerabilities through authentication testing and brute-force credential checks.

Professional network reconnaissance and port scanning tool supporting multiple scan types, service detection, and vulnerability scanning via NSE scripts.