Certified Ethical Hacker: Database Hardening
Budget: ₹12,500 – ₹37,500 INR
I need a thorough, professional penetration test that zeroes in on database security. The work will involve actively probing our live environment for misconfigurations, permission-escalation paths, injection points, improper encryption, and any other weakness that a determined attacker might exploit.
Scope
• Assess the entire database layer—from connection strings and authentication flows to stored procedures and backup endpoints—without disrupting business operations.
• Document every finding with reproducible steps, risk ratings, and clear remediation guidance.
• Validate fixes with a follow-up retest so we can close the loop confidently.
Deliverables
1. Methodology outline (tools, test phases, compliance references).
2. Vulnerability assessment report in PDF with an executive summary and technical appendix.
3. Proof-of-concept exploits or screenshots for critical issues.
4. Retest confirmation letter stating that previously identified issues have been resolved or re-rated.
I expect the engagement to remain confidential, to follow all relevant legal and ethical standards, and to be scheduled during agreed maintenance windows to avoid any unintended downtime. Please confirm your CEH/OSCP or equivalent certification and note the primary tools you prefer (e.g., Burp Suite, SQLmap, Nmap, Metasploit, Wireshark).
Scope
• Assess the entire database layer—from connection strings and authentication flows to stored procedures and backup endpoints—without disrupting business operations.
• Document every finding with reproducible steps, risk ratings, and clear remediation guidance.
• Validate fixes with a follow-up retest so we can close the loop confidently.
Deliverables
1. Methodology outline (tools, test phases, compliance references).
2. Vulnerability assessment report in PDF with an executive summary and technical appendix.
3. Proof-of-concept exploits or screenshots for critical issues.
4. Retest confirmation letter stating that previously identified issues have been resolved or re-rated.
I expect the engagement to remain confidential, to follow all relevant legal and ethical standards, and to be scheduled during agreed maintenance windows to avoid any unintended downtime. Please confirm your CEH/OSCP or equivalent certification and note the primary tools you prefer (e.g., Burp Suite, SQLmap, Nmap, Metasploit, Wireshark).