Web Security Jobs

Implementation of exploiting iOS browser vulnerabilities to steal seed phrases and WhatsApp and Telegram keys Attack Framework DarkSword: Targets iOS 13 through 18.7, exploiting Safari vulnerabilities through malicious webpages to achieve remote code execution (RCE). Includes 23 exploits covering multiple iOS versions. Detailed Attack Flow Bait delivery: Victims are lured through fake adult livestreaming sites, TRON energy platforms, cryptocurrency trading pages, or legitimate websites compromised with hidden iframes for watering-hole attacks. Exploit execution: Once the victim visits the page, a JavaScript framework fingerprints the device and delivers the appropriate WebKit RCE exploit. Sandbox escape: Kernel vulnerabilities are chained to escalate privileges from the browser sand...

My service-portfolio site is throwing browser security warnings, so I know malicious code has slipped in. I need someone who can quickly pinpoint the entry point, wipe out every infected file, snippet, or database injection, and harden the entire WordPress stack so the warnings disappear for good. Here is what has to be accomplished before we talk about any redesign: • Trace and document the exact backdoor or vulnerability that let the malware in. • Eradicate all malicious files, scripts, and database entries without disrupting legitimate content. • Patch core, theme, and plugin weaknesses, then apply best-practice hardening (firewall rules, secure file permissions, updated keys, etc.). • Validate that the site loads cleanly across modern browsers with no securi...

My site is dragging its feet and Google PageSpeed Insights confirms it. Loading feels heavy on the home page, all service-detail pages and even the contact page, and every extra second is costing me both visitors and search-engine traction. I’m looking for someone who can dig into the code, hosting setup and assets, remove the bottlenecks and leave the site lean enough to score markedly higher on PageSpeed while respecting Core Web Vitals and general SEO best practices. Key results I want to see: • Sub-2-second first load on the three page types mentioned above. • Green scores on PageSpeed Insights for both mobile and desktop. • No visual regressions or broken functionality after the optimisations. Please plan to deliver a short before/after report from Pag...

Kastle Media is hiring a freelance WordPress developer to build a new client website using our existing Kastle Core custom WordPress theme and our approved schema plugin. This is a custom-code WordPress build. It is not a page-builder project. The successful freelancer will work within the existing Kastle Core architecture and build a new, client-specific website from scratch. Each client has its own design, content, brand identity, page layouts, and CSS. Do not copy page templates, CSS, HTML, components, or visual styling from another Kastle client website unless a specific technical pattern has been approved for reuse. AI-assisted development is acceptable. The final output must be clean, maintainable, accessible, responsive, secure, documented, and production-ready. Build in WordPress u...

I want to learn how to fix a real infected website. You will need to provide the infected website. Controlled environment is ok but continued work may be given if you provide real infected websites over a controlled environment. PHP based systems like laravel and Wordpress preferred. In your response give an example of an infected website you fixed, explain the situation. I only need an hour of your time for now but if I like your work I may give you more work. Preference will be given to real natural responses to this ad over AI responses.

MICROSOFT SECURITY ANALYST & SECURITY ENGINEER PRACTICAL PROGRAM We are looking for an experienced Microsoft Security Analyst / Security Engineer to serve as a technical instructor for a practical Microsoft Security training programme. LANGUAGE REQUIRE REQUIREMENT: FLUENCY IN ENGLISH Excellent Communication is Require. Our target students are IT Support professionals, system administrators, network engineers, and individuals with general IT/technical knowledge who want to transition into Microsoft Security Operations and Security Engineering. TRAINING OBJECTIVE The objective is to transform participants from general IT/technical roles into practitioners who can identify, investigate, analyse, recommend remediation, implement security controls, verify remediation, and document M...

Job Title: Cybersecurity & Digital Forensics Expert Job Type: Contract Location: Remote Experience: 5+ years Job Description We are looking for an experienced Cybersecurity & Digital Forensics Expert to investigate cyber incidents, identify suspicious activities, trace network activity, and support authorized investigations involving compromised systems, accounts, and devices. The ideal candidate should have strong hands-on experience in ethical hacking, penetration testing, digital forensics, OSINT, network security, IP analysis, and incident response. Key Responsibilities Investigate cybersecurity incidents, unauthorized access, suspicious accounts, and potential security breaches. Perform IP address analysis and authorized IP geolocation to determine the approximate geograp...

I’m building a fully-featured fintech website and need an experienced developer to take it from concept to production. The platform must let end-users create an account, sign in with a traditional email-and-password flow, and then manage their finances through an elegant, mobile-responsive interface. Core modules will include user authentication, personalised dashboards, payment or transaction handling, rich data visualisations, and a lightweight admin panel. Strong application-level security (OWASP best practices, encrypted credentials, rate limiting) is mandatory, as is fast performance on both desktop and mobile. My preferred stack is React or on the front end, backed by Node.js or Python services that talk to a PostgreSQL database and external payment/banking APIs. I inten...

Senior Technical Auditor for I am looking for an experienced senior full-stack technical auditor to conduct an independent review of an existing bilingual Saudi offers and loyalty platform called Chance Plus. The platform is currently live and deployed in production. This is not a new development project and I am not requesting a rebuild. The initial task is strictly to review, test and report on the existing implementation before onboarding the first real store. Technology stack: TypeScript React and Vite Node.js and Express PostgreSQL Drizzle ORM and database migrations REST APIs and OpenAPI Progressive Web App (PWA) GitHub, pull requests and CI/CD DigitalOcean App Platform and Managed PostgreSQL Arabic and English interfaces, including RTL support Platform structure: Custo...

Looking for a certified and experienced cybersecurity professional or security testing company to conduct VAPT (Vulnerability Assessment and Penetration Testing) for a web application and its APIs. Only applicants with proven VAPT experience and relevant cybersecurity certifications will be considered. Scope Web Application VAPT REST API VAPT WebSocket API VAPT Grey-box testing Multiple user roles Approximately 20 API endpoints Requirements Proven experience conducting professional VAPT for web applications and APIs Relevant industry-recognized cybersecurity certifications Strong knowledge of OWASP and modern web/API security Ability to provide a professional, detailed VAPT report Previous VAPT experience and sample/redacted reports preferred Deliverables Comprehensive VAPT report Vuln...

Project description: A modern, professional and user-friendly digital platform designed to bring professionals, businesses and opportunities together in one place. It will include professional profiles, networking, job opportunities, business connections, messaging, service listings, project opportunities, reviews, verification features, notifications and secure communication. The platform will focus on a clean premium design, smooth navigation, strong performance, scalability and an excellent experience across mobile and web.

Google/Gmail Account Recovery Assistance Needed I need help recovering access to an old Google/Gmail account that belongs to us. We currently have: the exact Gmail address; the last known password that was used on the account; some knowledge of the account's previous usage/history. We no longer have: access to the old recovery phone number; access to a recovery email; access to previously trusted/logged-in devices. I am looking for someone who has real experience with Google Account Recovery, especially difficult cases where the recovery phone/email and trusted devices are no longer available. I need someone who can: Review the current situation and determine what legitimate recovery options may still be available. Guide us through Google's official account recovery proce...

Project brief for freelancers and agencies 1. PROJECT OVERVIEW We are looking for an experienced WordPress designer and developer to create a modern, professional, responsive and user-friendly website for 2AEU KGO, the alumni association of Université Peleforo Gon Coulibaly (formerly URES Korhogo), Côte d'Ivoire. The association was legally constituted on 29 August 2026 and is governed by an elected Executive Board. Our members live in Korhogo, in Abidjan, across Côte d'Ivoire and abroad. The website will become the official home of the association. Website language: FRENCH. All content is supplied by us in French, and the entire interface menus, forms, error messages, automated e-mails must be correctly labelled in French. The technical structure must allo...

I need a thorough security assessment of both our public-facing web applications and the underlying network infrastructure. For the web layer, your testing must zero-in on two critical areas—Authentication & Authorization and Input Validation—so we can be confident that user identities are protected and no injection or validation bypass is possible. On the network side, I’m looking for the classic internal and external penetration workflow: reconnaissance, vulnerability discovery, exploitation, and clear remediation guidance. Deliverables • Executive summary that highlights overall posture and business risk • Technical report detailing: – Findings for Authentication & Authorization – Findings for Input Validation – Networ...

I’m preparing to run a large-group session on Zoom and need a live, practical walk-through of everything an large meeting can (and cannot) do. During a real-time screen-share, guide me step by step so I can click along with you and build the muscle memory. My priorities are understanding how to manage participants smoothly—assigning co-hosts, controlling entry, and fine-tuning security and engagement tools—plus unlocking the more advanced features that make a big gathering feel effortless. I also want to make sure all the critical settings are configured correctly both before we go live and while the meeting is in progress. If you know Zoom inside out and enjoy teaching hands-on, let’s schedule a session that leaves me confident, organized, and ready to host w...

My Linux-based web server has been hit with malicious, unfamiliar files and scripts. I need a system administrator who can track every infection, remove it completely, and then perform a fresh installation and configuration of Imunify360 so the machine is once again hardened and monitored in real time. cPanel is available, SSH access can be granted, and downtime must be kept to a minimum while you work. Key deliverables: • Full scan, isolation, and removal of every malicious file or script • Fresh Imunify360 install with optimal settings, automatic updates, and firewall enabled • Brief post-cleanup report detailing what was found, what was removed, and confirmation that Imunify360 is active and passing its own self-check I’ll be on hand for quick credential e...

My home network has been compromised. I need an expert to: - Diagnose security breaches - Identify and remove unauthorized devices - Secure my Wi-Fi and connected devices - Provide guidance on protecting myself from future attacks Ideal Skills & Experience: - Strong background in cybersecurity - Experience with home network security - Ability to explain technical concepts clearly - Trustworthiness and professionalism Please help me regain control of my digital life. I do suspect that the individual may have used something like apple buisness or cisco technologies to gain complete access and control over everything I do on a daily basis. Including revoking my access to my own information. I need someone who can look beyond the curtain and really understand that it is not just the dev...

My blog is invisible on Bing—none of the pages show up in the index even though the site is verified in Bing Webmaster Tools. I have already: • submitted the through the portal • requested manual URL indexing several times Despite that, the index count stays at zero. I need a specialist who can dig into the crawl diagnostics, spot whatever is blocking Bingbot, and guide me through the corrective steps so that the blog’s pages start appearing in search results. What success looks like to me: 1. Bingbot can crawl the site without errors. 2. Core pages are indexed and visible in a Bing “site:” query. 3. You provide a brief report outlining what was fixed or optimized (, meta tags, sitemap structure, server response codes, etc.) so I can maintain it go...

I need an experienced full-stack engineer who can give special attention to the backend of my platform and raise its security posture across the board. The frontend is in decent shape, but the core services, data layer, and deployment pipeline all need a careful redesign so that every request, record, and secret is handled with industry-grade protection. Here is the outcome I’m after: • A fresh backend architecture that scales cleanly and is resilient against common threat vectors. • End-to-end authentication and authorization flows, encrypted at rest and in transit. • Well-structured APIs with input validation, rate limiting, detailed logging, and automated tests. • Infrastructure-as-code or container scripts so I can spin up identical, hardened environme...

More details: Which platform would you like to migrate your website to? WordPress What functionality do you want to ensure is transferred from your current website? It contains videos, forms and general lead capture Do you need any additional features to be added during the migration? This question was skipped by the user

I need a skilled ethical hacker to carry out a focused penetration test on my production web application. The goal is to uncover any exploitable weaknesses before they become a problem, with particular attention to: • Data validation • Session management Once we sign an NDA I’ll share architecture notes, limited credentials, and a staging URL. Please stay within scope, avoid destructive techniques, and document every step so I can reproduce the findings. Deliverables I expect – A concise executive summary of overall risk – Detailed, step-by-step proof-of-concept for each issue discovered – Practical remediation advice ranked by priority – A retest summary after fixes (short verification pass) Tools such as Burp Suite, OWASP ZAP, or yo...

I need a skilled web developer who can guide me from the planning stage through launch. Although I have not locked down whether the site will be an e-commerce shop, a portfolio, a blog, or a hybrid of these, I do know the finished product must appeal to business professionals and feel polished, fast, and trustworthy. What I need from you • A short discovery call or questionnaire to clarify the site’s core purpose, content structure, and feature list. • Design and build of a modern, responsive website that looks great on desktop and mobile. • Advice on the best platform—WordPress, Shopify, Webflow, or a custom stack—based on the goals we define together. • Integration of essentials such as contact forms, basic SEO, analytics, and security best ...

My eFootball (Konami) game account is locked because the email address tied to it is no longer accessible. The task is straightforward: recover full control of the account using only legitimate, white-hat methods. Scope of work • Analyse the account’s current status and identify every official recovery path offered by Konami. • Prepare the exact evidence of ownership I will need—screenshots, purchase receipts, device IDs, in-game data, or any other verifiable details. • Draft and refine the messages, forms, or tickets that must be submitted to Konami support, tracking each response until the case is resolved. • Advise on additional security measures once access is restored to prevent a repeat incident. Acceptance criteria 1. I am able to sign in ...

I need a simple, web-based registration form that doubles as a brief survey. The form must collect three kinds of data—personal information, contact details and payment information—and present most of its questions with check-box inputs to keep completion time low. Clean field groups, clear labelling and basic validation are important so users move smoothly from one section to the next. Once submitted, the data should reach me by email and also be stored in a secure online spreadsheet or database you set up. If you prefer WordPress, a lightweight form plugin is fine; hand-coded HTML/CSS/JavaScript works just as well, as long as the final embed code drops straight into my site. Please make sure the payment fields are wrapped in HTTPS and that any email notifications hide s...

The goal is to create an intelligent Web Application Firewall that sits in front of my custom web applications, inspects traffic in real time, and automatically reacts to threats. The platform must excel at three core functions I have prioritised: Real-Time Threat Detection, Defensive Blocking, and Attack Analytics. Key attack surfaces to guard against are SQL Injection, Cross-Site Scripting (XSS), and Distributed Denial of Service (DDoS). Every request should be scored, logged, and, when required, blocked or rate-limited instantly. I want to see exactly what is happening through a live security dashboard and to manage rules through a clean API that my apps can call programmatically. Integration needs to be seamless: the WAF will be deployed in front of several custom web services, s...

All the files and database dumps from my previous site are safely backed up; what I’m missing is the technical muscle to turn that archive into a live travel website on Hostinger. Here’s the picture: • I need full, end-to-end assistance setting up the hosting environment on my Hostinger account—nameservers, DNS records, PHP settings, MySQL import, the works. • Once the server space is ready, the backup must be unpacked, configured, and brought online exactly as it was before (themes, plugins, media, user data, bookings, etc.). • SSL should be installed and auto-renewing, and basic security hardening applied. • After launch, I want a quick walkthrough of the control panel and any pointers on routine maintenance or updates so I can keep things r...

Tengo un sitio ya maquetado en HTML, CSS y JavaScript que necesita los últimos ajustes antes de salir a producción. Qué hay que hacer • Pulir la estética: hay detalles de espaciado, tipografías y versiones responsive que deben quedar prolijos. • Revisar y mejorar la funcionalidad en desktop y mobile: algunos botones no disparan los eventos JS como deberían y ciertas animaciones se sienten lentas. • Corregir pequeños textos para que todo esté en un castellano neutro y sin errores. • Desarrollar e integrar un módulo de acceso por email y contraseña, con registro, recuperación de clave y validación básica del lado del servidor. Busco una solución segura que puedas mo...