Przedstawiamy pakiet bez prowizji za zatrudnienie!
Publikuj oferty pracy
Zatrudniaj bez prowizji
Information Security Specialist - 22121 Outstaffing
Języki programowania/Technologie
§ Pythona
§ Bash
§ Php
§ HTML
§ C\C++
§ Dokumentacja techniczna/Raporty z testów penetracyjnych/Propozycje
RDBMS
§ Mój SQL
§ PostgreSQL
Narzędzia programistyczne
§ AWS/Kubernetes
§ Git
Środowiska wirtualizacyjne
§ VMWare
§ VirtualBox
System operacyjny
§ Microsoft Windows 95/ 98/ 2000/ XP/ 2003 Server/ Vista / 7/8/10
§ Kali Linux
§ Ubuntu
§ CentOS
Serwery aplikacji/internetowe
§ Nginx
§ Tomcat
§ Apache
Metodologie
§ OWASP
Narzędzia do testowania
§ Nmapa
§ Nikto
§ Zestaw beknięcia
§ OWASP ZAP
§ Nessus
§ Wiresharka
§ Maltego
§ Mapa sql
§ Pogromca
§ Metasploit
§ Rozbłysk chmur
§ Ślizgać się
Simulation of cyberattack on clients website. Vulnerability scanning and prevention from future attacts.
§ Analyze the system and prepare scope of work
§ Testing the security of the website
§ Dynamic and Static vulnerability scanning
§ Exploitation of found vulnerabilities, fuzzing.
§ Prepare a detailed report on found vulnerabilities including executive summary, risk level of each vulnerability and recommendations on how to fix them.
Industry-standard penetration testing tools and frameworks, including Nmap, Sniper, Nessus, Maltego, Hydra, the Metasploit Framework, Searchsploit, Gobuster, Wireshark, Burp Suite, Tcpdump and Sqlmap
Testing the security posture of the organization with a simulated attack on the website.
§ Analyze the system and prepare the scope of work
§ Identification of site`s loopholes
§ Information gathering, searching for fingerprints in the backend of the website
§ Manual security scanning
§ Communication with the client's security engineer
§ Creating a final report with the summary, risk level of each, vulnerability and recommendations on how to fix them included
The Harvester, Nikto, Nmap, Burp Suite, Sniper, Nessus, Maltego, Hydra, Metasploit, Searchsploit, Gobuster, Wireshark, , Tcpdump and Sqlmap
- Perform penetration tests on the systems
- Search for weaknesses in web applications
- Determine the current vulnerabilities that would be easily exploitable
- Review and provide feedback for information security fixes
- Creating the complete in-depth report that summarises the carried out activities, the probable threats identified, the risk score,
Nmap, Sniper, Nessus, Maltego, Hydra, the Metasploit Framework, Searchsploit, Dirb, Gobuster, Wireshark, Burp Suite, Tcpdump and Sqlmap. AWS infrastructure deployment.