Backend & APIs · By cyberful

Design and interpret advanced content discovery with ffuf and complementary web fuzzers.

cyberful/cyberful

Assess WebSocket, Server-Sent Events, webhook, event-stream, callback, and asynchronous integration security during authorized penetration tests or code audits.

cyberful/cyberful

Test executable smart-contract properties with deterministic, offline Foundry harnesses over a confined source snapshot.

cyberful/cyberful

Test authorized web-cache key construction, variation, partitioning, authenticated response handling, revalidation, poisoning, deception, purge, and TTL behavior.

cyberful/cyberful

Deterministically compare OpenAPI JSON operations with implementation and observation inventories to expose undocumented, unimplemented, unexercised, and security-declaration coverage gaps.

cyberful/cyberful

Test deterministic authorization around AI tool discovery, selection, canonical arguments, credentials, tenants, destinations, approvals, delegation, retries, and effects.

cyberful/cyberful

Assess the security of a smart-contract system across protocol economics, trust roles, upgrade and governance paths, oracle and bridge dependencies, deployment state, and off-chain operators.

cyberful/cyberful

Audit smart-contract source and build evidence for authorization, accounting, state-machine, external-call, upgrade, signature, oracle, token-integration, and denial-of-service defects.

cyberful/cyberful

Test application email generation, recipient authority, template and header construction, link and token binding, inbound parsing, threading, reply handling, bounce processing, and tenant isolation.

cyberful/cyberful

Test service accounts, OAuth clients, workload federation, token exchange, audience binding, delegated actors, credential rotation, and machine-identity authorization.

cyberful/cyberful

Audit whether API handlers, gateways, serializers, validators, and generated clients implement the effective contract and its security invariants.

cyberful/cyberful

Operate Cyberful's pinned Foundry toolchain and engagement-owned Anvil lab for authorized EVM smart-contract bug bounty work.

cyberful/cyberful

Operate kubectl, kube-bench, Trivy, Prowler, and manifest/runtime evidence for advanced Kubernetes security assessment.

cyberful/cyberful

Use sqlmap to confirm and characterize suspected SQL injection with faithful requests and bounded evidence.

cyberful/cyberful

Coordinate testing of authentication and authenticator state across registration, login, MFA, recovery, linking, federation, device trust, reauthentication, suspension, and revocation.

cyberful/cyberful

Assess externally or internally reachable services, administrative planes, debug interfaces, data stores, search clusters, object storage, orphaned DNS, and deployment exposure during authorized…

cyberful/cyberful

Assess server-side URL retrieval and network egress during authorized penetration tests or code audits.

cyberful/cyberful

Audit container runtime isolation across namespaces, capabilities, seccomp, mandatory access control, mounts, devices, daemon sockets, cgroups, identity, and host integration.

cyberful/cyberful

Audit serverless applications for event-source authority, function identity, tenant context, data exposure, retry behavior, deployment controls, and unsafe service integrations.

cyberful/cyberful

Test authorized serverless event handlers for source authority, signature and replay controls, tenant binding, schema validation, retry behavior, idempotency, and side-effect isolation using bounded…

cyberful/cyberful

Assess identity trust topology, assurance boundaries, issuer and relying-party responsibilities, and failure containment before testing a specific authentication or authorization mechanism.

cyberful/cyberful

Route a cloud-native security audit across effective IAM, infrastructure as code, build and release paths, containers, Kubernetes, serverless workloads, secrets, event sources, and control-plane…

cyberful/cyberful

Route an identity assessment across federation architecture, policy enforcement, identity and tenant propagation, workload identity, recovery assurance, linking, and provisioning.

cyberful/cyberful