Freelance Cybersecurity SpecialistsFreelance Cybersecurity Specialists
ProjectsPeople
Jason Smyth's avatar
Jason Smyth
proCopthorne, UK
Cyber expert specialising in Azure Security Services.
$10k+
Earned
4x
Hired
5.0
Rating
22
Followers
Cyber expert specialising in Azure Security Services.
Cover image for Microsoft Sentinel & Splunk ES Engineer for up to 6 months
Microsoft Sentinel & Splunk ES Engineer for up to 6 months
0
15
Cover image for Extended Interview Process for CrowdStrike SIEM Specialist
Extended Interview Process for CrowdStrike SIEM Specialist
0
13
Cover image for Setting up and optimising Microsoft Sentinel
Setting up and optimising Microsoft Sentinel
1
55
Cover image for Configure SIEM Security Operation using Microsoft Sentinel
Configure SIEM Security Operation using Microsoft Sentinel
0
50
Cybersecurity Specialist(7)
Bob Vasic's avatar
Bob Vasic
Dublin, Ireland
AI Systems Architect | Agentic AI, Integrations & Security
$1k+
Earned
2x
Hired
5.0
Rating
497
Followers
ANYTHING_EXPERT

Expert

AI Systems Architect | Agentic AI, Integrations & Security
Cover image for Discover Response Red: Transformative Cybersecurity Case Study
New case study live: ResponseRed.com (https://contra.com/p/OosRZZ7X-response-red-or-ai-native-incident-response-and-web3-forensics) Response Red (https://www.responsered.com/) was built for the moment when cybersecurity stops being theoretical. Active compromise. Ransomware pressure. Identity takeover. Cloud intrusion. Business email compromise. Endpoint breach. Data exposure. Operational disruption. The platform was designed to communicate one thing clearly: Response must be immediate, disciplined, intelligence-led, and executed by people who understand high-stakes cyber operations. Response Red brings together 24/7 global incident response, authorized offensive security, penetration testing, red teaming, digital forensics, proactive incident management, AI-assisted triage, and executive-grade cyber crisis reporting. The website and platform experience were built with a premium white-first enterprise identity, crimson red response signals, cinematic global threat visuals, structured incident intake, and security-conscious AI workflow design. This was not a brochure build. It was a full-stack cybersecurity presence designed for trust, speed, operational clarity, and market authority. Case study now published on Contra. Check it out (https://contra.com/p/OosRZZ7X-response-red-or-ai-native-incident-response-and-web3-forensics)
1
2
18
1.1K
Cover image for ResponseRed | AI-native Incident Response & Web3 Forensics
ResponseRed | AI-native Incident Response & Web3 Forensics
1
10
28
Cover image for Every cybersecurity pro knows the struggle: juggling 10+ tab...
Every cybersecurity pro knows the struggle: juggling 10+ tabs just to verify a single IP or hash. I built Fuse Intel Grid to solve exactly that. It’s a professional OSINT analytics dashboard that unifies intelligence from over 20+ free sources into a single pane of glass. No more context switching—just clear, actionable data. 🚀 Key Features: Unified Intelligence: Aggregates data instantly. Powerhouse Integrations: Connects with Shodan, VirusTotal, AbuseIPDB, and more. Cost-Effective: Leverages the best free OSINT sources available. Check out the live app here: https://fuse-intel-grid.lovable.app I’d love to hear your feedback on the UI/UX or what other data sources you'd like to see integrated!
26
579
Cover image for cyberlinksec.com (https://cyberliksec.com) - Implementing 2 ...
cyberlinksec.com (https://cyberliksec.com) - Implementing 2 new subsidiaries that are ongoing acquisition with CyberLink Security
1
8
610
Cybersecurity Specialist(4)
Watheq Zboun's avatar
Watheq Zboun
maxUnited States
Microsoft 365 & Azure Solutions Architect
$5k+
Earned
2x
Hired
5.0
Rating
14
Followers
Microsoft 365 & Azure Solutions Architect
Cover image for Have you wondered how hacekrs
Have you wondered how hacekrs bypass MFA? Nowadays it is getting easier. There is a phishing kit called Mirage2FA that has been working against Microsoft 365 since late 2024. Here is how it goes. The user lands on a fake login page. They type their password. They approve the MFA prompt on their phone. Everything they enter is passed straight through to Microsoft in real time, so the sign-in genuinely succeeds and looks completely normal to them. Microsoft issues the session tokens, and the kit keeps a copy. With those cookies someone can read the mailbox, open SharePoint and OneDrive, and reach anything sitting behind SSO. They never see a second prompt, because the authentication already happened. ANY.RUN (http://ANY.RUN) put numbers on it. 9,426 accounts targeted across 3,518 domains, roughly 4,532 showing signs of compromise, most of them in the US. A third of the successful logins happened on phones, where you can barely see the URL you are looking at. The advice going around is to switch on Continuous Access Evaluation. I would switch it on too. Just read the documentation first, because it does something slightly different to what people assume. CAE sessions run tokens for up to 28 hours. The default is one hour. What you get in exchange is revocation when something happens, and Microsoft is specific about what counts: the account is disabled or deleted, the password is changed or reset, MFA gets turned on, an admin revokes refresh tokens, or ID Protection flags the user as high risk. Allow up to 15 minutes for that to propagate. IP location is the only one that applies straight away. Three things worth knowing before you lean on it. It covers Exchange Online, SharePoint Online and Teams. Guest accounts are not supported, which is where a lot of contractor access lives. And it only reads IP-based named locations, so a country-based policy buys you nothing here. If I were fixing this in a tenant tomorrow, in this order: Phishing-resistant sign-in first. A FIDO2 key checks the domain it is talking to, so it will not hand anything over to a proxy wearing Microsoft's face. CAE on, so revocation actually reaches the services. Then a runbook where you revoke sessions before you reset the password. Reset first and you have changed the lock while someone is still inside holding a key that works. If session cookies walked out of your tenant this morning, what would notice, and how long would it take? Source: ANY.RUN (http://ANY.RUN) threat research, 19 August 2026. CAE behaviour from Microsoft Learn.
1
1
165
Cover image for Did you know that cybercrime
Did you know that cybercrime is projected to cost the world $10.5 TRILLION a year. What is the average data breach in the US? $10.22 million which is at a record high. Here is my question to people here, if you could only strengthen 3 out of these 12 cybersecurity pillars, which would you pick? Disaster Recovery Authentication Authorization Encryption Vulnerability Management Audit & Compliance Network Security Endpoint Security Incident Response Container Security API Security Third-Party Management I would argue Authentication, Incident Response, and Third-Party Management, because the data shows 53% of breaches start with stolen credentials, and vendor compromises are surging.
0
207
Cover image for GoDaddy Move-Away That Uncovered a Data Residency Problem
GoDaddy Move-Away That Uncovered a Data Residency Problem
0
10
Cover image for Microsoft Security Architecture Diagrams
Microsoft Security Architecture Diagrams
0
9
Cybersecurity Specialist(2)
Ilya Kozlov's avatar
Ilya Kozlov
Ukraine
HMI Interface designer. UX/UI for embedded screens & devices
$10k+
Earned
2x
Hired
4.4
Rating
53
Followers
HMI Interface designer. UX/UI for embedded screens & devices
Cover image for CCTV E-commerce platform & branding
CCTV E-commerce platform & branding
0
20
Cover image for HMI interface for medical equipment
HMI interface for medical equipment
3
30
Cover image for HMI design for a laboratory
HMI design for a laboratory blood testing device
1
5
756
Cover image for HMI design for electric motorcycle
HMI design for electric motorcycle
3
689
Cybersecurity Specialist(2)
Stephen Kisong'e's avatar
Stephen Kisong'e
Nairobi, Kenya
Cyber Security Analyst
Cyber Security Analyst
Cover image for AI-Assisted CTF Solving and Bug
AI-Assisted CTF Solving and Bug Bounty Hunting I integrated Cyber-Ornith Obliterated, an uncensored cybersecurity model running locally in LM Studio, with HexStrike AI through MCP to execute tools on Kali Linux. I demonstrated the setup by solving Root-Me’s HTML source-code CTF challenge. The model retrieved the page, inspected its HTML and identified a password exposed in a comment. I verified the command output and submitted the answer, successfully completing the challenge. Beyond CTFs, I built this project to support AI-assisted bug bounty hunting, including web response analysis and vulnerability investigation within authorized scope, with human oversight and verification of findings.
1
0
32
Cover image for AI Agent Hacking & Security
AI Agent Hacking & Security Testing Explored how an AI agent can be manipulated through adversarial interactions, with a focus on AI agent hacking, prompt injection, sensitive data exposure, and unsafe agent behavior. The lab uses an AI agent connected to controlled internal data and tools, creating a realistic environment for testing how the agent responds when an attacker attempts to bypass its instructions, access information it should not reveal, or influence how it uses its capabilities. The assessment demonstrates the practical attack surface of modern AI agents and how seemingly simple interactions can become security issues when an agent has access to sensitive data or external capabilities. The testing was performed against fictional data in an isolated environment for authorized security research.
0
28
Cover image for Designed and implemented a hands-on
Designed and implemented a hands-on AI red teaming environment using Microsoft PyRIT to evaluate the security of a local Retrieval-Augmented Generation application. The project connected a Parrot OS testing environment to a Windows-based AnythingLLM RAG application, with DeepSeek running locally through LM Studio. I configured PyRIT to communicate with the AnythingLLM workspace through a custom HTTP target and used controlled adversarial objectives to examine how the application handled requests involving financial records, customer information, payroll data, and restricted credentials. The testing workflow included API connectivity validation, isolated Python environment setup, automated prompt execution, response collection, and evidence review. The lab was built entirely around fictional Kiso Secure business data, allowing realistic sensitive-data disclosure scenarios to be tested without using real customer information or credentials. The resulting workflow demonstrates how automated AI red teaming can be used to identify potential data leakage, retrieval-boundary weaknesses, and unsafe handling of sensitive information in AI-powered applications.
2
0
82
Cover image for Built a controlled Kiso Secure
Built a controlled Kiso Secure AI red teaming lab using Promptfoo to test a local RAG application for prompt injection, system prompt leakage, indirect prompt injection, and sensitive data exposure. The setup used AnythingLLM with a Kiso Secure knowledge base, automated adversarial testing, and a hardened workspace to compare security behavior before and after remediation.
2
0
158
Cybersecurity Specialist(12)
Nitika Kumari's avatar
Nitika Kumari
Bhopal, India
Web, API and Android Penetration Tester
New to Contra
Web, API and Android Penetration Tester
Cover image for Comprehensive validation testing, proof-of-concept verification,
Comprehensive validation testing, proof-of-concept verification, and structural remediation audits to ensure complete security patch efficacy. The Objective: A development organization required a rigorous follow-up assessment to validate that security patches introduced after an initial audit were correctly implemented, completely neutralized the identified threat vectors, and did not introduce new regression flaws into the environment. The Approach: I executed a dedicated verification cycle focused specifically on replicating the original attack patterns using the exact tools and exploits from the initial assessment. Every patch was manually tested using Burp Suite Professional, custom Python exploit scripts, and runtime debuggers to confirm the vulnerability's status and measure remediation success against standard CVSS 3.1 metrics. From a dedicated retesting scope targeting 20 original security findings, I delivered the following lifecycle results: Closed (Remediated): Successfully verified the resolution of 16 findings, including all critical business logic bypasses and sensitive data exposure pathways, confirming they are no longer exploitable. Bypassed (Incomplete Fixes): Identified 2 instances where a development team used client-side input validation instead of server-side sanitization, allowing the original exploit to still bypass the patch. New Regression: Discovered 2 minor configuration errors introduced by changes made to the access control framework during the patching process. Documentation Provided: Delivered updated Proof-of-Concept (PoC) logs and step-by-step documentation for the outstanding issues to guide the team to a permanent fix.
0
63
Cover image for Comprehensive external/internal network penetration test,
Comprehensive external/internal network penetration test, cloud infrastructure review, and vulnerability assessment for a production hosting ecosystem. The Objective: A production hosting provider required a full-scope security audit to evaluate their perimeter defense, verify compliance with the CIS Benchmarks and OWASP Top 10 for Cloud, and uncover critical misconfigurations before public deployment. The Approach: I executed a hybrid security assessment combining automated infrastructure reconnaissance with deep manual configuration checks. Every vulnerability was manually validated using tools like Nmap, Wireshark, and CloudBrute to eliminate false positives and scored using standard CVSS 3.1 metrics. From a single comprehensive audit, I uncovered 31 reproducible findings: 3 High Severity: Exposed database backups publicly accessible via misconfigured AWS S3 buckets, and unauthenticated remote code execution (RCE) vectors on perimeter network appliances. 6 Medium Severity: Overly permissive IAM policies granting excessive root privileges, missing multi-factor authentication (MFA) enforcement on management panels, and outdated SSH protocol versions in use. 10 Low Severity: Unrestricted directory listings on internal staging servers, insecure network daemon configurations, and loose firewall rules permitting unnecessary inbound traffic. 12 Informational: Internal IP address disclosures in HTTP response headers, missing asset tagging, and verbose system version banners.
0
65
Cover image for Comprehensive web application penetration test,
Comprehensive web application penetration test, API endpoint analysis, and vulnerability assessment for a production-facing infrastructure ecosystem. The Objective: An enterprise client required a full-scope security assessment to evaluate their external attack surface, verify strict alignment with the OWASP Application Security Verification Standard (ASVS Level 3), and uncover critical server-side and business logic flaws before deploying a major code release. The Approach: I executed a hybrid security assessment combining automated reconnaissance with deep manual exploitation across the application layer and its integrated APIs. Every vulnerability was manually validated using Burp Suite Professional, SQLmap, and Postman to eliminate false positives and scored using standard CVSS 3.1 metrics. From a single comprehensive audit, I uncovered 24 reproducible findings: 2 High Severity: Broken Object Level Authorization (BOLA/IDOR) on critical billing endpoints and a SQL injection flaw in the primary authentication pathway. 5 Medium Severity: Faulty session management allowing session fixation, missing Rate Limiting on public API routes, and Cross-Site Scripting (XSS) via un-sanitized comment inputs. 7 Low Severity: Lax CORS configuration rules, missing secure flag attributes on cookies, and verbose server error disclosures. 10 Informational: Exposure of outdated software banners and missing HTTP security headers (such as Content-Security-Policy).
0
76
Cover image for Comprehensive Android application penetration test,
Comprehensive Android application penetration test, reverse engineering analysis, and vulnerability assessment for a production-ready mobile application. The Objective: A mobile application provider required a full-scope security audit to evaluate their client-side attack surface, verify compliance with the OWASP Mobile Application Security Verification Standard (MASVS Level 2), and uncover critical runtime flaws before public deployment. The Approach: I executed a hybrid security assessment combining static application security testing (SAST), dynamic instrumentation (DAST), and automated reconnaissance. Every vulnerability was manually validated using tools like Frida, Objection, Jadx-GUI, and Burp Suite to eliminate false positives and scored using standard CVSS 3.1 metrics. From a single comprehensive audit, I uncovered 19 reproducible findings: 1 High Severity: Insecure local data storage exposing unencrypted user credentials and private API keys in the shared preferences file. 4 Medium Severity: Broken cryptography implementations, insufficient SSL pinning mechanisms permitting Man-in-the-Middle (MitM) attacks, and unprotected exported Activities allowing unauthorized internal intents. 6 Low Severity: Lack of root detection, weak code obfuscation rules, and excessive logging of sensitive debug information via Logcat. 8 Informational: Outdated third-party SDK dependencies and missing compiler exploit mitigation configurations.
0
73
Cybersecurity Specialist(4)