Diese Dienstleistung ist vorübergehend nicht verfügbar
I will test login and authentication security of your web application
Bangladesch
10 Aufträge abgeschlossen
Cyber Security Expert, Penetration Tester, Bug Bounty Hunter
Über diesen Service
Is your login system truly secure?
I'm Shahadat Fahim certified pentester (eJPT, CRTA)
and Hall of Fame researcher at companies in UK and Europe.
WHAT I TEST:
- Login brute force and rate limiting
- JWT algorithm confusion and token forgery
- Password reset token reuse and manipulation
- OTP and 2FA bypass techniques
- Session fixation and hijacking
- OAuth and SSO misconfiguration
- Account takeover via auth bypass
WHAT YOU GET:
- Professional PDF report with CVSS scores
- Full Proof of Concept with screenshots
- Step by step remediation guidance
- Free retest after fixes
Manual testing only. No automated scanner dumps.
Message me before ordering to discuss your scope.
Mein Portfolio
FAQ
What authentication systems do you test?
JWT, OAuth, SSO, session based auth, OTP, 2FA and password reset flows.
Do you need test account credentials?
Yes. Please provide test accounts at different privilege levels for full coverage.
Can you test my mobile app login too?
Yes. Mobile API authentication testing is available in Standard and Premium packages.

