y
yosiismalov

yosi

@yosiismalov

Web Application Penetration Tester Security Researcher

Israel
Englisch, Hebräisch
Einige Informationen werden in englischer Sprache angezeigt.
Über mich
Cybersecurity Specialist & Web Application Penetration Tester focused on Web/API security, vulnerability research, and attack surface analysis. I perform evidence-driven security assessments using manual testing and OWASP-based methodologies. My work includes authentication, access control, input validation, API testing, asset discovery, and security automation. Findings are manually validated and delivered with reproducible evidence, demonstrated impact, and remediation guidance. Testing is performed only on explicitly authorized systems.... Mehr lesen

Kompetenzen

y
yosiismalov
yosi
offline • 
Durchschnittliche Antwortzeit: 7 Stunden

Meine Dienstleistungen

Programmierung & Technik
I will perform attack surface mapping and web asset discovery
Geschäftliche Ermittlungen
I will perform professional osint research and investigation

Portfolio

Arbeitserfahrung

Freelance

Independent Security Researcher

Freelance • Freiberufler

Sep 2025 - Present11 mos

Conduct independent cybersecurity research and authorized security testing focused on web applications, APIs, and external attack surfaces. Perform vulnerability research, manual web security testing, attack surface mapping, asset and endpoint discovery, API analysis, and security automation. Developed Bash-based security automation workflows, including VulnHunter-AI, to organize reconnaissance data, classify endpoints, preserve evidence, and prioritize higher-value investigation targets. Research follows defined authorization and scope, with emphasis on baseline and control comparison, reproducibility, manual validation, minimal-impact proof of concept, and responsible disclosure. Document technical findings with supporting evidence, demonstrated impact, limitations, and actionable remediation guidance.