Security Reviewer

Hello, My name is Mohd Rafi, I live and work in India, I have more than 13 years of experience as an Architect/Tech Lead/Developer in .Net Technologies. I have gone through your job post and it looks like a perfect fit for my skills set. I have architected and developed a large number of Web enterprise applications. It's been almost a decade that I've been working in C#, ASP.NET, MVC, WCF, SQL, HTML, CSS, Javascript and Jquery. I have worked on many existing and new multi-tier applications from front-end to back-end.I have good knowledge of web handlers, web api, web services and have very good hands on the UI and on server side code. I have good working experience of Design patterns and architectural patterns. If you are ready, I can show some of the code that I have written to give you an idea how clean and easy to maintain code do I write. I have worked for several product companies. From last 3 years I was working with DocStar on their product 'Eclipse' which is a document management software. I would appreciate, if we can have 10 minutes meeting, I can show you how fruitful and right choice I will be for your project. One more thing I would like to tell you that I'm ready for a POC as well.I want to show you my work and skills. You can contact me on skype: mohammadrafionline Thanks

I do quite a bit of work on website security esp in the areas and more: SQL Injection XSS (Cross Site Scripting) File Disclosure Remote File Inclusion Code Injection Directory Traversal Do you have a list of check you need added or a set of sites which you want to compare yours with? Give a ping back and we can chat! Meanwhile, do check the portfolio and rating. About Us: 5* rated in elance,upwork,freelancer and guru with 90% completion rate!

+ I am a security analyst with a specialization in auditing C source code. + I'll check for the usual things like buffer and heap vulnerabilities, but I'll also go beyond that and look for more obscure attack vector. + I will write a comprehensive report and outline the appropriate steps to implement mitigation and improve the security of your code. + I will spend proper type evaluating the source through fuzzing, static, and dynamic analysis. + I will test for vulnerabilities with pointers, NULL dereferences, type conversion vulnerabilities, metacharacter handling, race condition, privilege vulnerabilities, remote procedure calls, and logic flaws. + Although I will use some fuzzing, I'll also include in-depth and thorough testing of input parameters. + If you have any extra questions or information, just shoot me a message, I would love to answer any questions or concerns you have. Thank you!