External Security Weakness Assessment

I need a seasoned security researcher to look at my systems strictly from the outside—no source code, no privileged logins, only the same public access an attacker would have. Your mission is to probe, map, and exploit any path that could reveal sensitive data, then document everything in a clear, actionable report.

Scope & Approach
• Black-box testing only: you will receive target URLs/IPs and any public-facing endpoints, nothing more.
• Goal: determine whether personal or business-critical information can be exposed and explain the exact steps that make it possible.
• Techniques are up to you—Burp Suite, OWASP ZAP, custom scripts, nmap, Metasploit, or other tools you trust—as long as every finding is reproducible.

What I expect in your proposal
• A brief overview of your background in vulnerability research or bug-bounty work.
• One or two example projects (or disclosed CVEs) that show you can uncover issues without privileged access.
• The methodology you follow for reconnaissance, exploitation, and validation.

Deliverables
1. Executive summary highlighting risk to sensitive data.
2. Detailed technical report with proofs-of-concept, screenshots or packet captures, CVSS (or similar) severity ratings, and step-by-step remediation advice.
3. Verification checklist I can hand to developers or system owners to confirm fixes.