Jalla K.

Web Application & API Security Assessment

Conducted a comprehensive security assessment of a financial services web application and API, evaluating authentication, authorization, session management, and input validation controls. • Identified and validated critical vulnerabilities including IDOR/BOLA, SQL Injection, CSRF, CORS misconfigurations, and security misconfigurations through manual penetration testing and API security analysis. • Performed attack surface analysis and OSINT-driven reconnaissance using Burp Suite, FFUF, Gobuster, and Nmap; produced a CVSS-based VAPT report with remediation recommendations and retesting validation