Information Security Specialist - 22121 Outstaffing

Simulation of cyberattack on clients website. Vulnerability scanning and prevention from future attacts.

§ Analyze the system and prepare scope of work

§ Testing the security of the website

§ Dynamic and Static vulnerability scanning

§ Exploitation of found vulnerabilities, fuzzing.

§ Prepare a detailed report on found vulnerabilities including executive summary, risk level of each vulnerability and recommendations on how to fix them.

Industry-standard penetration testing tools and frameworks, including Nmap, Sniper, Nessus, Maltego, Hydra, the Metasploit Framework, Searchsploit, Gobuster, Wireshark, Burp Suite, Tcpdump and Sqlmap

Testing the security posture of the organization with a simulated attack on the website.

§ Analyze the system and prepare the scope of work

§ Identification of site`s loopholes

§ Information gathering, searching for fingerprints in the backend of the website

§ Manual security scanning

§ Communication with the client's security engineer

§ Creating a final report with the summary, risk level of each, vulnerability and recommendations on how to fix them included

The Harvester, Nikto, Nmap, Burp Suite, Sniper, Nessus, Maltego, Hydra,  Metasploit, Searchsploit, Gobuster, Wireshark, , Tcpdump and Sqlmap

• Perform penetration tests on the systems
• Search for weaknesses in web applications
• Determine the current vulnerabilities that would be easily exploitable
• Review and provide feedback for information security fixes
• Creating the complete in-depth report that summarises the carried out activities, the probable threats identified, the risk score,

Nmap, Sniper, Nessus, Maltego, Hydra, the Metasploit Framework, Searchsploit, Dirb, Gobuster, Wireshark, Burp Suite, Tcpdump and Sqlmap. AWS infrastructure deployment.