Browse categories
Explore
Fiverr Pro
English
$
USD
I will perform manual web app and api penetration testing, owasp top 10 pentest
AWS and Terraform Engineer, AI Voice Agents, Full Stack Developer
Hi, I'm Afnan, a Software Engineer with 5 years of full-stack experience and 4 years of hands-on AWS work. I help businesses build secure cloud infrastructure, scalable web applications and AI-powered...
Level 2
Has met high performance criteria and has a proven track record for meeting client expectations.
About this Gig
Is your web app or API secure enough? I perform hands on web application and API penetration testing to find real vulnerabilities before attackers do. Manual testing, not just scanner output.
What I test:
- OWASP Top 10: SQL injection, XSS, CSRF, SSRF
- Authentication, session and access control flaws (IDOR, privilege escalation)
- REST and GraphQL API security (BOLA, mass assignment, rate limits)
- Business logic flaws, misconfigurations and exposed data
What you get:
- Clear PDF report with severity ratings (CVSS), proof of concept and step by step fixes
- Executive summary for your team or client
- Free retest of fixed issues (Standard and Premium)
- NDA on request. All findings stay confidential.
Tools and method: Burp Suite, OWASP ZAP, Nmap, Nuclei, ffuf, SQLmap and manual exploitation, following OWASP WSTG and ASVS.
Message me with your target URL and scope before ordering. I only test systems you own or are authorized to test.
Device:
Server
Operating system:
Windows
•
Linux
•
Ubuntu
My Portfolio
FAQ
Do I need to give you permission to test?
Yes. I only test systems you own or are authorized to test. I will confirm scope and written permission before starting.
Will testing cause downtime?
No. I use safe, non-destructive techniques and avoid heavy load. For production, I recommend testing a staging copy if possible.
Do you offer a retest after fixes?
Yes. Standard and Premium include a retest to verify your fixes. Basic can add a retest anytime for a small fee.
What will the report include?
A PDF with an executive summary, severity ratings, proof of concept, impact and clear remediation steps for each finding.
