Pushkar Zantye

Foot Printing. Scanning networks.
Experience of Vulnerability Assesment and Penetration Testing for infrastructure/network/web application/databases.
. Web Services Knowledge/Penetration Testing is want to done manually
using framework like Metasploit. . Good Knowledge on Secure Code Review of applications is desirable.
. Demonstration of Proof of concepts for exploits.
. Wireless Penetration Testing & Application Security Review. . Security Configuration Review of Database / Servers / Firewalls / Switches /
Routers.
Knowledge on open source and commercial tools for e.g Metsploit framework, Nessus, Acunetix, Appscan, nmap etc.
Experience Mobile application testing.
Good to have Security Products Knowledge.
Good to have Telecom Security Knowledge & Ethical Hacking Skills.
Knowledge of security assessment tools e.g. Knowledge of Operating systems preferably Linux / UNIX (IBM IAX, Sun Solaris, HP UX etc.) and network equipments.
System and Network Hardening.
Experience in testing: application vulnerabilities, penetration, business logic based on OWASP testing guide, configuration management, authentication
authorisation, session management.
Tools used Burp suite, W3af, Skipfish, Firebug, Wikto, Websecurify, Nikto, Absinthe-automated tool.
Proxy tools: Paros, Fiddler, ZAP, WebScarab.
Sqimap, Havij, sqlininja SQL Injection Tool.
Wireshark (sniffer), Metasploit, Nessus, OpenVAS, Cain and Abel. Sysinternals, NMAP, Scapy, LOphtCrack, RainbowCrack, Brutus.