Smit S. Profile

0.0

(0 reviews)

You're now following

Error following user.

This user does not allow users to follow them.

You are already following this user.

Your membership plan only allows 0 follows. Upgrade here.

Successfully unfollowed

Error unfollowing user.

You have successfully recommended

Error recommending user.

Something went wrong. Please refresh the page and try again.

Email successfully verified.

$10 USD / hour

jamnagar,

india

$10 USD / hour

It's currently 9:59 AM here

Joined July 5, 2013

0 Recommendations

Smit S.

@smitbshah92

0.0

(0 reviews)

0.0

$10 USD / hour

jamnagar,

india

$10 USD / hour

N/A

Jobs Completed

N/A

On Budget

N/A

On Time

N/A

Repeat Hire Rate

Web Application Security Expert | CEH

No one is good at everything. As much as you may be in command of your core offering, chances are your security doesn't quite make the grade. Whether it's your Blog, Website, Web Application, Web Service, Web API or more, securing from the core and deploying a secured and bug free application is essential. That's where I come in. I help companies for their web application security. My "Pay per Bug" and "Pay per Project" service help clients who struggle with managing a secure application for their target audiences with sharp, meaningful and relevant deliverable. And if you need help in setting up webinars/webcasts to train you for Ethical Hacking and Security, talk to me for the same.

See all PHP Developers in India

Contact Smit S. about your job

Portfolio

2063506

I had found a critical security vulnerability on image-maps.com using which I was not only able to hack the whole website but was also able to compromise the entire web server. For the same, I have been thanked here in the below link.

http://www.image-maps.com/blog/security/web-server-security-vulnerabilities/29/

Image-maps.com - Blog Post

I had found multiple severe security vulnerabilities on ArcGIS and Esri.com for which I have been acknowledged here in the below link.

http://doc.arcgis.com/EN/TRUST/SECURITY-CONCERN/

ArcGIS & Esri - Hall of Fame

2063483

I had found a security vulnerability on ScanMyServer.com which is itself an online website security scanning service. Parent company is Beyond Security and their blog is named as SecuriTeam - One of the best security blog where I have been thanked and acknowledged for reporting them a security vulnerability. Please find the below link for Blog Post.

http://blogs.securiteam.com/index.php/archives/2255

ScanmyServer.com - Blog Post on SecuriTeam

I had found a security vulnerability on Sans.org which is System Admin, Audit & Network Security Company(SANS). The vulnerability that I had found is Cross Frame Scripting followed by Clickjacking Attack for which I have been acknowledged here in below link.

https://www.sans.org/security/

Sans.org - Hall of Fame

2063399

I had found a 0 day security vulnerability on edX.org which is an online course launching platform. The vulnerability was Cross Domain Referer Leakage for which I was credited with a CVE Identifier CVE-2015-2286 from cve.mitre.org. Please find the below link for reference.

https://open.edx.org/CVE-2015-2286

edX.org - 0 day Vulnerability

2063377

I had found a severe security vulnerability on PayPal - World's biggest payment gateway for overseas and local money transfer. The vulnerability was Cross Site Scripting(XSS) for which I have been acknowledged by PayPal here in the below link.

https://www.paypal.com/webapps/mpp/security-tools/wall-of-fame-honorable-mention

PayPal - Hall of Fame

2063506

Image-maps.com - Blog Post

ArcGIS & Esri - Hall of Fame

2063483

ScanmyServer.com - Blog Post on SecuriTeam

Sans.org - Hall of Fame

2063399

edX.org - 0 day Vulnerability

2063377

PayPal - Hall of Fame

Reviews

Changes saved

No reviews to see here!

Experience

Techdefence

Jul 2014 - Present

Working as a Senior Security Analyst which includes security testing of company's upcoming product and conducting other Vulnerability Assessment & Penetration Testing Projects. I am also working here as a Trainer to train students for advanced courses into Ethical Hacking like CCSE and CWASE by Techdefence.

Multiple Companies

Jul 2013 - Present

I've helped below mentioned companies to secure their applications by reporting them security vulnerabilities. TomsHardware & TomsITPro , Barracuda Networks , WebSecurify , Kudelski Security , Corona Labs, Secunia, Unbounce, Countermail, SendSpace, GetResponse, LibyanSpider, HelloSign - Legally Binding Electronic Signatures Strikingly, Runbox, Connectify.me, Ookla, Xamarin, Sendinblue and many others.

Payatu Technologies Pvt. Ltd.

Jun 2014 - Jul 2014 (1 month, 1 day)

Worked on secure coding and code porting of vulnerable codes.

Education

Bachelors in Computer Engineering

Gujarat University,

India

2010 - 2014

(4 years)

Qualifications

Techdefence

2015

CWASE(Certified Web Application Security Expert) is an advanced certification in Web Application Security which covers in depth knowledge and training for OWASP Top 10 Vulnerabilities.

Techdefence

2013

CCSE (Certified Cyber Security Expert) is widely recognized career oriented course on Advanced Ethical Hacking,Application Security, Web Application development,its Assessment & Penetration Testing, Cyber Crime Investigation & forensics.

EcCouncil, USA

2014

Certified Ethical Hacker (CEH) is a qualification obtained in assessing the security of computer systems, using penetration testing techniques. The code for the CEH exam is 312-50, the certification is in Version 8 as of late 2013. Penetration tests are usually employed by an organization who trusts them to attempt to penetrate networks and/or computer systems for the purpose of finding and fixing computer security vulnerabilities.