OTP Vulnerability Simulator Development

Job ID: 39234338

Budget: ₹750 – ₹1,250 INR

I am looking for a skilled web developer with experience in building applications using Twilio APIs to create an educational simulation tool. The project involves developing a web-based interface for controlled, ethical demonstrations of social engineering techniques, particularly focusing on OTP (One-Time Password) interception scenarios. The tool will strictly be used for educational purposes within a controlled environment and with explicit consent.

Responsibilities:
Integrate Twilio’s SMS and Voice APIs to send and receive messages.
Configure webhooks to capture SMS replies for OTP parsing and logging.
Develop a user-friendly web interface to manage simulation workflows:
Trigger OTP requests.
Send spoofed messages mimicking trusted entities.
Display received OTPs for demonstration purposes.
Ensure secure and ethical handling of all data within the tool.
Deploy the web application on a cloud hosting platform (e.g., AWS, Heroku).
Requirements:
Proven experience with Twilio API integration (SMS and Voice).
Expertise in backend development using Python (Flask/FastAPI) or Node.js.
Familiarity with web hosting platforms like AWS, Google Cloud, or Heroku.
Knowledge of handling webhooks and asynchronous processes.
Ability to use regex or similar tools for parsing OTPs from incoming SMS messages.
Optional: Experience with caller ID spoofing tools or APIs for simulation purposes.
Project Scope and Deliverables:
Web-Based Interface:
An easy-to-use interface for managing phone numbers and simulation actions.
OTP Interception Simulation:
Trigger OTP requests to pre-determined test accounts.
Send spoofed SMS messages mimicking a trusted sender.
Log and display incoming OTP replies for educational purposes.
Hosting:
Deploy the tool on a cloud-based platform for accessibility during demonstrations.
Key Considerations:
Educational Purpose:
The project will only be used to educate users about OTP vulnerabilities in controlled environments and is not intended for malicious purposes.
Legal Compliance:
Ensure compliance with relevant laws and guidelines during development (e.g., Twilio’s terms of service).
User Experience:
Focus on simplicity and functionality for small, controlled demonstrations.
Budget and Timeline:
Budget: $500–$1500 depending on experience and deliverables.
Timeline: 2–4 weeks for project completion.
To Apply:
Please provide:

Examples of similar projects, particularly involving Twilio or webhook integrations.
Your approach to handling sensitive data ethically and securely.
A brief outline of how you would implement the project.