Muhammad Shoaib .

Penetration tester and WordPress security expert. Web app, API, network, and WordPress security testing. Vulnerability assessment, malware removal, and OWASP audits. Manual testing, real exploitation analysis, and clear remediation steps your developers can act on. Not automated scan exports. Core services: - Penetration testing — web apps, APIs, networks (OWASP Top 10, OWASP API Top 10) - WordPress malware removal & hacked site recovery (24-hour turnaround) - WordPress security hardening — WAF, 2FA, file permissions, security headers - Vulnerability assessment & security audits with CVSS scoring - OSINT investigations & digital footprint analysis - Cyber threat intelligence & dark web monitoring - Mobile application security assessments (CASA Tier 2) - AI/n8n workflow security audits — LLM integrations, prompt injection - Red-team tooling & phishing simulation (Evilginx, custom phishlets) What you get on a penetration test: - Manual testing with Burp Suite — not just Nessus/Nuclei exports - Validated vulnerabilities with working proof of concept — no false positives - CVSS-scored findings with reproduction steps - Executive summary + developer-ready technical report - Free retest within 14 days What you get on WordPress malware removal: - Full malware scan & manual cleanup (file system + database) - Hidden admin accounts removed, backdoors closed - Core, theme, and plugin integrity restored - Google blacklist & SafeBrowsing review request - Security hardening included — WAF, 2FA, file permissions - 30-day reinfection guarantee Selected past work: - Penetration testing engagements — web apps, APIs, network scope - CASA Tier 2 mobile application security assessment - Dark web monitoring & cyber threat intelligence reporting - Cyber SOC Analyst consulting - Evilginx phishlet development & red-team tooling - Qualys vulnerability scanning, CVSS scoring, CWE classification - IDS ruleset development and Linux root cause analysis - WordPress malware removal & site hardening engagements Tools: Burp Suite, OWASP ZAP, Nmap, Wireshark, Metasploit, Nuclei, Qualys, Sucuri, Wordfence, MalCare, Maltego, Autopsy, custom Python. Methodology: OWASP Top 10, OWASP API Top 10, NIST SP 800-115, PTES, MITRE ATT&CK. Trained on EC-Council CEH curriculum with CodeRed coursework in OWASP ZAP pentesting, OSINT, malware analysis, and digital forensics. Share your scope or describe what you need. I'll respond within a few hours with a clear plan and a fixed price.