09.09.2025 aktualisiert

**** ******** ****
40 % teilweise verfügbar

Web Penetration Tester

Bad Reichenhall, Deutschland
Nur Remote
Maschinenbau M.Sc
Bad Reichenhall, Deutschland
Nur Remote
Maschinenbau M.Sc

Profilanlagen

CV - Csenger Ujvari

Skills

Password CrackingActive DirectoryAPIsPenetration TestingAnwendungssicherheitAuthenticationsBash ShellKorrektur- und VorbeugemaßnahmeInformationssicherheitCorsKryptographieCross-Site Request ForgeryLinuxDigitale ForensikDjangoDocument Object ModelDNSEmbedded SoftwareIncident ResponseHypertext Transfer Protocols (HTTP)Intrusion Detection SystemLog-AnalyseNmapOffensive SicherheitOWASPPrototypingRed Team (Netzsicherheit)Next.jsSicherheit von WebanwendungenSession-ManagementSiemSql-InjectionTCP / IPTcpdumpWiresharkWeb ApplikationenWebSocketRust (Programming Language)React.jsFlaskMontage und DemontageMalwareCross-Site Scripting (XSS)FastAPIBackend-programmierungMetasploitFull Stack EntwicklungBetriebssystemeFront EndSicherheitsbestimmungenBurp SuiteAnalyse der Schwachstellen
Core Cybersecurity Skills
  • Networking fundamentals (TCP/IP, DNS, HTTP/S, secure protocols)
  • Operating systems: Linux (bash, privilege escalation), Windows & Active Directory basics
  • Cryptography: hashing, symmetric/asymmetric encryption, password cracking
  • Exploitation fundamentals (Metasploit, CVEs, privilege escalation)
  • Security operations: SOC, incident response, log analysis, forensics
  • Security principles & career foundations
Offensive Security & Pentesting
  • Reconnaissance: passive/active recon, subdomain enumeration, content discovery
  • Scanning & enumeration: Nmap (basic, advanced, post-scan), Gobuster, Hydra
  • Exploitation: Metasploit, manual exploitation, shell handling
  • Web application attacks:
    • Authentication bypass, session management, brute force
    • Injection attacks (SQLi, NoSQLi, LDAPi, SSTI, XXE, ORM, command injection)
    • File inclusion (LFI/RFI), SSRF, path traversal
    • Client-side attacks (XSS, CSRF, DOM-based, CORS misconfigurations)
    • Race conditions, prototype pollution, insecure deserialization
    • HTTP request smuggling (classic, HTTP/2, WebSockets)
Defensive Security
  • SIEM, IDS/IPS, firewall fundamentals
  • Malware analysis tooling (CAPA, REMnux, FlareVM)
  • Defensive utilities (CyberChef, digital forensics basics)
Web Application Security
  • Deep understanding of how the web works (HTTP, sessions, DNS, cookies, APIs)
  • Familiarity with OWASP Top 10 and OWASP API Top 10 vulnerabilities
  • Hands-on labs (OWASP Juice Shop, Pickle Rick, custom CTF rooms)
Tools & Frameworks
  • Pentesting & exploitation: Burp Suite (Repeater, Intruder, Extensions), Metasploit, SQLMap, Hydra, Gobuster
  • Networking & analysis: Nmap, Wireshark, tcpdump
  • Password cracking: John the Ripper, Hydra
  • Defensive & forensic tools: CyberChef, CAPA, REMnux, FlareVM

Erfahrung

Berufserfahrung0 - 5 Jahre
Freelancer seit2025

Sprachen

DeutschverhandlungssicherEnglischverhandlungssicherUngarischMuttersprache

Projekthistorie

Fullstack Engineer

MCA Engineering

Industrie und Maschinenbau

50-250 Mitarbeiter

  • Full Stack development
  • Frontend development
    • JavaScript
    • React
    • NextJS
    • Typescript
  • Backend development
    • APIs
    • Python
    • Django
    • Django REST Framework
    • Rust
    • PostgreSQL

Software Engineering - Research Assistant

TU. Braunschweig - Institut für Werkzeugmaschinen und Fertigungstechnik
* Designed and implemented software capable of parametrically creating, running and evaluating Abaqus simulations.
* Evaluated and analyzed of simulation
* Visualized simulation data using dashboarding softwares
* Documented and managed projects
* Built development environment locally and on Github
* Programming languages: Python, Bash, Powershell, Matlab
* Tools: VS Code, Git, Github,
* Python libraries: numpy, pandas, matplotlib, pyvista, panel, logging, dataclasses, abc, pyabaqus, pytorch, subprocess,
os, typing, venv

Kontaktanfrage

Einloggen & anfragen.

Das Kontaktformular ist nur für eingeloggte Nutzer verfügbar.

RegistrierenAnmelden