Hi, This job is about a UK based competition related to cyyber securety. I need someone who is proficient with these jobs. There are program rules, and expected eligibility.
Program Rules
TESTING POLICY AND RESPONSIBLE DISCLOSURE
Please adhere to the following rules while performing research on this program:
Denial of service (DoS) attacks on Ooredoo QPSC applications, servers, networks or infrastructure are strictly forbidden.
Avoid tests that could cause degradation or interruption of our services.
Do not use automated scanners or tools that generate large amount of network traffic.
Do not leak, manipulate, or destroy any user data or files in any of our applications/servers.
Do not copy any files from our applications/servers or disclose them.
No vulnerability disclosure, full, partial or otherwise, is allowed.
Notify Ooredoo immediately if you discover any evidence of a breach of Ooredoo’s systems apart from your own tests.
We strive to review submitted vulnerabilities reports within 4 weeks.
Ooredoo will not pursue legal action against researchers who report vulnerabilities within the terms of company’s reporting mechanism.
By participating to this program :
You agree not to disclose to any third party any information related to your report, the vulnerabilities and/or errors reported, nor the fact that a vulnerabilities and/or errors has been reported to Ooredoo.
You agree to indemnify and hold Ooredoo harmless against all claims, losses, demands, proceedings, fines, and expenses arising from or related to your violation of these rules.
Unless otherwise required under applicable law or regulation, Ooredoo has no responsibility to pay you compensation for any direct, indirect, or consequential losses, property damage, financial loss, loss of productivity, information that is lost or corrupted, regardless of whether such loss could have been foreseen, or any other loss that is not due to Ooredoo’s gross negligence.
You agree that these terms and conditions will be governed by the laws of the State of Qatar and you consent to the jurisdiction of the courts of Qatar, which will have exclusive jurisdiction over any dispute arising hereunder.
REWARD ELIGIBILITY
We are happy to thank everyone who submits valid reports which help us improve the security of Ooredoo QPSC, however only those that meet the following eligibility requirements may receive a monetary reward:
You must be the first reporter of a vulnerability.
The vulnerability must be a qualifying vulnerability (see below).
The report must contain the following elements:
Clear textual description of the vulnerability, how it can be exploited, the security impact it has on the application, its users and Ooredoo QPSC, and remediation advice on fixing the vulnerability;
Proof of exploitation: screenshots demonstrating the exploit was performed, and showing the final impact;
Provide complete steps with the necessary information to reproduce the exploit, including (if necessary) code snippets, payloads, commands etc.
You must not break any of the testing policy rules listed above.
You must not be a former or current employee of Ooredoo QPSC or one of its contractors.
If you find the same vulnerability several times, please create only one report and eventually use comments. You'll be rewarded accordingly to your findings.
The triage team will use the "One Fix One Reward" process: if two or more endpoints use the same code base and a single fix can be deployed to fix all the others weaknesses, only one endpoint will be considered as eligible for a reward and other reports will be closed as 'informative'.
Reward amounts are based on:
Reward grid of the report's scope;
CVSS scoring and actual business impact of the vulnerability upon performing risk analysis.
If you are confident you can perform these tasks send me a proposal describing all your qualifications and previous accomplishment. Start your proposal with a word "cupcake" so I know you have read the description.
Hello, my name is Md Shofiur and I am here to offer your urgently required pen tester. I am a certified security specialist with extensive experience in software testing, web application security, penetration testing and ethical hacking.
I understand that you are looking for someone who is proficient in testing programs related to cyber security, with specific rules and eligibility requirements. My core competency lies in performing black and gray box testing on live web applications/networks or in lab environments.
I have experience in vulnerability assessment for PCI & HIPAA compliance as well as social engineering and red team assessment. Additionally I have knowledge of website hacking / penetration testing techniques. My skillset includes pen testing, web application security, ethical hacking & countermeasures, vulnerability assessment and malware analysis.
I would be delighted if you could consider me for this project. Please feel free to contact me if you have any questions or would like any additional information about me or my services.
Hello i am a cybersecurity engineer and i am certified professional pentester, i have read your description and i can work with you, just contact me to discuss more about the project.
Nice to meet you artist0779, It is a pleasure to communicate with you.
My name is Anthony Muñoz, I am the lead engineer for DSPro IT agency and I would like to offer you my professional services. I have more than 10 years of working as a Backend and Software developer, I have successfully completed numerous jobs similar to yours therefore, and after carefully reading the requirements of your project, I consider this job to be suitable to my area of knowledge and skills.
I would love to work together to make this project a reality.
I greatly appreciate the time provided and I remain pending for any questions or comments. Feel free to contact me.
Greetings
Hello, my name is Randy, a skilled cybersecurity consultant based in Costa Rica.
I believe that this project would be an excellent fit, and I would be honored to have the opportunity to work with your team. If you have any questions or would like to discuss this project further, please don't hesitate to contact me.
I am writing to propose this cybersecurity project that I believe would be of great value to your organization.
Thank you for considering my proposal, and I look forward to hearing from you soon.
-Randy Varela
I am confident that I can provide you with the best possible service for your project. My skillset includes Computer Security, Internet Security, Web Security which will enable me to provide the necessary security testing for your program. Also I am MITTRE AT&CK Certified.
I have extensive experience in testing and vulnerability assessment which will enable me to provide thorough, accurate and timely results on all aspects of the program. Additionally, I am able to adhere to the strict testing policy outlined above so as not to cause any disruption to Ooredoo's services.
I would be delighted to discuss this project further if given the chance and look forward to hearing from you soon!
Hello, my name is John and I am a certified ethical hacker with over 15 years of experience in computer security, software testing, web security and virtualization. I specialize in testing and analysis of software applications and services as well as firewall configurations.
I understand that you are looking for someone who is proficient with testing programs related to cybersecurity and require someone who is able to work remotely. From my experience in the field of cybersecurity, I believe I am the perfect person for this job. My extensive knowledge of software development, operating systems, web application security and cloud computing makes me the ideal candidate for this project. Additionally, my availability 24/7 makes it easier for me to respond to urgent demands.
If you choose me for this job please do not hesitate to contact me directly with any further questions or concerns you may have regarding the project at your earliest convenience. Thank you for considering me for the position!
COMPUTER SECURITY EXPERT
DEAR EMPLOYER,
I’ve completed the exact same projects before successfully. Awarding me will be the fastest way to complete your task with the best rates possible.
I CAN ASSURE YOU 100% THAT WE ARE FULLY CAPABLE OF EXECUTING ANY LEVEL OF TASK/PROJECT BASED ON THE SKILL REQUIRED.
I am fully confident about our skills and my understanding of the project description and we are ready to go through any test or sample task you assign to acquire your trust. Let me know when are you available for an initial 15-30-minute discussion (FREE OF CHARGE) so we can discuss the requirement in detail and I can walk you through the mentioned systems to acquire your trust in my skill.
REST ASSURED YOUR WORK IS IN VERY SAFE AND PROFESSIONAL HANDS.
THANK YOU
I understand that you are looking for someone who can work remotely to test the UK competition related to cybersecurity. With my experience in computer security and web security, I am confident that I can provide the necessary skills to complete this job.
I take great pride in providing quality work with fast turnaround times and an availability 24x7 via freelancer messenger. Additionally, I provide samples before starting any work so that you can be sure of getting exactly what you want without any delays.
I would love to help you with this project! Please feel free to contact me if you have any questions or would like further information about my services.
I am excited to apply for this position at your esteemed organization. With my certification as a Certified Ethical Hacker V12 from EC-COUNCIL and ongoing studies in the field, I am confident that I have the skills and expertise to excel in this role.
My extensive training has provided me with a deep understanding of ethical hacking methodologies, tools, and techniques. I am skilled in vulnerability assessment, penetration testing, social engineering, and network security. Additionally, I have experience with various programming languages such as Python, Java, and C++, which enables me to develop custom exploits and scripts to automate processes.
Throughout my career, I have honed my problem-solving skills and developed a meticulous attention to detail. I am committed to ensuring the security and integrity of the systems I work on and will leverage my skills to help your organization maintain a secure and safe environment.
Cupcake. Hey i am interested on working for your network . I do not have enough experience but i have reported many vulnerabilities in my 2 months of internship. I think i can even report interesting vulnerabilities to you. You can pay me after you think this vulnerability has good CVSS score only.
cupcake
I understand that you're looking for someone who can perform remote testing of Ooredoo QPSC applications, servers and networks. With my extensive experience in computer security and web security, I am confident that I can bring value to this project.
My skillset includes testing policy and responsible disclosure, vulnerability disclosure and vulnerability analysis. Additionally, I am familiar with CVSS scoring and business impact analysis which will be required for determining reward amounts for eligible reports.
I believe that my experience in cybersecurity makes me the perfect fit for this project and I would love to discuss further how I can help you achieve your goals. Please feel free to reach out if you have any questions or would like to discuss further how I can contribute to your organization's success.
My proficiency in using industry-standard penetration testing tools sets me apart. I am well-versed in tools like Burp Suite, Metasploit, Nmap, and OWASP ZAP. By combining these tools with my deep understanding of penetration testing methodologies, I can conduct comprehensive assessments of your web applications, mobile apps, and network infrastructure. I employ manual testing techniques and automated scanning to identify vulnerabilities, misconfigurations, and weaknesses that could be exploited by attackers.
Confidentiality and professionalism are paramount to me. I adhere to ethical guidelines and legal obligations to protect your sensitive information. Your organization's data will be handled with the utmost care and confidentiality throughout the project. In addition to delivering assessment reports, I provide actionable recommendations for remediation. I understand that the true value of a penetration test lies in addressing identified vulnerabilities. I can assist your team in implementing recommended security measures, offering guidance and support to ensure the successful mitigation of risks.I am dedicated to delivering exceptional results and providing ongoing support. Cybersecurity is a continuous process, and new threats can emerge over time. Even after the initial assessment, I am available to answer questions and offer guidance. Building long-term relationships with clients and being a trusted partner in their cybersecurity journey is of utmost importance to me.
cupcake
Young, enthusiastic, bilingual, computer graduate, with some experience in Government sector and Education – IT security;
hold TOP qualifications such as
OSCP (Offensive Security certified Professional)
CEH (Certified Ethical Hacker)
ECSA (EC-Council Certified Security Analyst)
LPT (Licensed Penetration Tester)
CHFI (Certified Hacker Forensic Investigator)
CCNA (Cisco Certified Network Associate)
Master degree in cybersecurity
20+ years of experience on the IT security field, mainly focus on web app penetration testing, infrastructure penetration testing & Mobile penetration testing
Author of how to hack with SQL Injection for pentest magazine
Hi,
This is Koumudi. With over 6 years of experience in the cybersecurity field, specializing in threat modeling, penetration testing, code review, configuration review, and Azure security, I am confident in our ability to address your organization's security needs effectively.
Scope of Services:
Penetration Testing: Perform comprehensive penetration tests to assess the security of your networks, systems, and applications. Identify and exploit vulnerabilities to provide actionable recommendations for improving your overall security posture.
Reporting and Documentation: Deliver comprehensive reports detailing the findings, recommendations, and action plans resulting from our assessments. Provide clear and concise documentation to support your organization in implementing the necessary security improvements.
I can get work done early as well if the size of the application vary.
