Browse categories
Explore
Fiverr Pro
English
$
USD
I will perform pen test and security audit on your website
Exposing Weaknesses, Strengthening Systems
Hello, I am Zamam Wasim, a cybersecurity professional specializing in penetration testing and OSINT (Open Source Intelligence). I help identify vulnerabilities, assess risks, and provide actionable so...
About this Gig
Hackers love vulnerable websites. I'll test your website ethically to uncover and fix vulnerabilities before real attackers find them.
As a cybersecurity specialist and penetration tester, I perform ethical security assessments to protect your website, server, or web application from real-world attacks.
What I Will Do:
- Full Website / Web App Penetration Testing
- Identify vulnerabilities like XSS, SQL Injection, CSRF, IDOR, RCE, LFI/RFI, and more
- Manual testing + automated scanning for maximum accuracy
- Provide a detailed PDF report with risks, screenshots, impact, and step-by-step fixes
- Retesting after fixes (optional)
Tools I Use:
- Burp Suite
- Nmap
- Nikto
- OWASP ZAP
- WhatWeb / Wappalyzer
- Dirsearch / Gobuster
- Metasploit (for safe, controlled tests)
- Subfinder / Amass (for recon)
- OpenSSL / GPG (for crypto verification where needed)
Why Choose Me?
- ️ Manual testing approach, not just automated scans
- Clear, professional reporting
- Trusted, confidential, and fully ethical
- Fast delivery
Deliverables
- ️ Vulnerability list (categorized by severity)
- Evidence & screenshots
- Recommended fixes
Feel free to contact me before placing the order.
Testing application:
Website
Device:
PC
•
Linux
FAQ
What information do you need to start the penetration test?
I only need the website URL, scope of testing, and written permission (a simple message is enough). No sensitive credentials are required unless you specifically request authenticated testing.
Will my website be safe during the penetration test?
Yes. I use safe, controlled, and ethical testing methods. I do not run destructive attacks. Your website will not be harmed or taken offline.
Do you perform manual testing or just run automated tools?
I perform both. Automated scanning helps identify common issues, but manual testing allows me to find deeper vulnerabilities that tools often miss.
What kind of vulnerabilities can you find?
I test for: XSS (Cross-Site Scripting) SQL Injection CSRF IDOR Broken Authentication Weak Access Controls Misconfigurations Insecure APIs Directory/Server exposure …and many more OWASP Top 10 issues.
What will be included in the final report?
You will receive a detailed PDF report with: List of vulnerabilities Severity level (High, Medium, Low) Impact on your system Steps to fix each issue Screenshots or proof of concept Summary of overall security posture
Can you test my website if it is live and currently receiving traffic?
Absolutely. I use non-intrusive techniques to ensure your website remains fully operational during the assessment.
Is this legal?
Yes — 100% legal as long as you provide permission. This is ethical penetration testing meant to help improve your security.
