f
faizan_wani3

Faizan Wani

@faizan_wani3

OSCP Certified Penetration Tester and VAPT Expert

India
English
About me
I'm an OSCP and CEH (Practical) certified penetration tester and ISO 27001 Lead Auditor with nearly 5 years of hands-on experience securing banking, government and SaaS applications. I perform manual web, API and Android penetration testing the way a real attacker works, not just an automated scan with a report attached. I'm also a HackerOne-rewarded bug bounty hunter. You receive a clear, client-ready PDF report with CVSS severity, proof of concept, screenshots and step-by-step fixes, plus a free retest after you fix the issues. NDA available on request.... Read more

Skills

f
faizan_wani3
Faizan Wani
Offline • 
Average response time: 1 hour

See my services

QA & Review
I will do web application and API penetration testing with report
From$100 / projectMore details
QA & Review
I will do manual rest and graphql API security testing with report
From$100 / projectMore details

Portfolio

Work experience

SecurEyes

Information Security Consultant

SecurEyes

Jan 2023 - Present • 3 yrs 10 mos

Lead end-to-end black-box and grey-box web application and API penetration tests for enterprise clients, from scoping to exploitation and reporting. Perform Android app security assessments (OWASP MASVS) using Frida and MobSF. Find high and critical issues such as IDOR/BOLA, injection, OAuth/JWT bypass and business logic flaws through manual testing. Write executive and technical reports with CVSS ratings and fix guidance, and support retesting. Lead a team of 15 security professionals.