
Closed
Posted
Paid on delivery
I’m assembling a small toolkit to speed up penetration-testing engagements and want lean, well-documented scripts in both JavaScript (browser or Node) and Python. The focus is offensive OSINT: harvesting publicly available data, mapping an organisation’s web surface, and producing quick proof-of-concept exploits or reports that I can drop straight into an assessment. Core scope – Automate open-source intelligence collection (DNS, subdomains, metadata, common misconfigs). – Chain findings into actionable steps that demonstrate real-world impact, not just raw data. – Keep each script portable: zero external dependencies when reasonable; otherwise pin versions and explain installs. – Provide clear in-line comments so I can tweak payloads during live tests. Deliverables • Source files (.py and .js) • A concise README covering usage, required modules, and expected output formats • Example run showing successful data extraction against a test domain Acceptance criteria The script set is ready when I can clone, install (one command), and reproduce the example run on a fresh Linux VM without editing code. Please mention the penetration-testing or red-team projects you’ve already completed—hands-on experience counts far more than lengthy proposals.
Project ID: 40706618
99 proposals
Remote project
Active 18 hours ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
99 freelancers are bidding on average $419 USD for this job

Hello, I am Dr. Rajesh Rolen, PhD in Computer Science & Engineering, with experience of over 20+ years in Testing / QA, Software Architecture, Python, Test Automation As a preferred freelancer in the top 1%, I have done 400+ projects here on freelancer.com, I have 4.9 ratings out of 5 on average, which showcases my quality of work and timely delivery. Key Highlights: - Free Hosting Support on the Cloud or any desired platform. - Free 3 months of post-delivery support to ensure that our client doesn’t face any challenges after the launch of the project. - Free Dedicated tester on projects to ensure quality delivery, so clients don’t need to act as a tester. - 10+ Years experience UI/UX team to ensure intuitive UI. Portfolio: https://www.freelancer.com/u/Microlent Please open the chat and send me a message, so we can have a more detailed discussion about the project to give you the project timeline and cost. Thank you for considering my services. I look forward to engaging in a productive conversation and understanding how I can be of assistance in bringing your project to life. Regards Rajesh Rolen
$500 USD in 10 days
9.3
9.3

⭐⭐⭐⭐⭐ Create Efficient Penetration-Testing Scripts in Python and JavaScript ❇️ Hi My Friend, I hope you are doing well. I've gone through your project details and see you are looking for scripts to speed up penetration-testing engagements. You don’t need to look any further; Zohaib is here to help you! My team has completed over 50 similar projects focused on offensive OSINT. I will create lean, well-documented scripts in both JavaScript and Python, ensuring they are portable and easy to use. ➡️ Why Me? I can easily create your efficient penetration-testing toolkit as I have 5 years of experience in OSINT automation, web mapping, and developing proof-of-concept exploits. My expertise includes scripting in Python and JavaScript, along with a strong grip on other relevant technologies like DNS automation and metadata analysis. ➡️ Let's have a quick chat to discuss your project in detail and let me show you samples of my previous work. I look forward to our conversation! ➡️ Skills & Experience: ✅ Penetration Testing ✅ Open Source Intelligence (OSINT) ✅ Python Programming ✅ JavaScript Development ✅ Data Extraction ✅ Web Surface Mapping ✅ Script Documentation ✅ Actionable Insights ✅ Metadata Analysis ✅ DNS Automation ✅ Error Handling ✅ Code Optimization Waiting for your response! Best Regards, Zohaib
$350 USD in 2 days
8.1
8.1

Hello Here are my practical projects. National Bank of Pakistan (NBP) — Ridgebot VAPT Solution POC (2023) Conducted a Proof of Concept (POC) for the Ridgebot Vulnerability Assessment and Penetration Testing solution. Set prerequisites at the customer's premises and deployed the complete solution. Trained customer resources on utilizing Ridgebot effectively. Whitelisted necessary IPs and ports, ran scans, and generated comprehensive reports. Obtained customer sign-off upon successful completion of the POC. Led 40+ full-scope penetration testing engagements focusing heavily on API security, broken object-level authorization (BOLA), and complex business logic flaws in financial and healthcare systems. • Assessed custom token systems (JWT, OAuth 2.0), evaluating signing algorithms, secret storage, and session revocation mechanics to prevent account takeover risks. • Collaborated cross-functionally with development and DevOps teams to embed security gates, contract-level validation tests, and threat modeling into the software development lifecycle (SDLC). • Performed rigorous revalidation testing, confirming complete remediation of critical authorization bugs and enforcing strict data isolation standard across multi-tenant applications.
$750 USD in 7 days
6.7
6.7

Hi, I'm Denis, a full-stack developer with hands-on experience building automation tools for security assessments. I've worked on offensive security projects involving data harvesting, API reconnaissance, and proof-of-concept generation for penetration testing. I understand your needs: a lean toolkit that chains OSINT findings into actionable intelligence. The scripts must be portable, well-commented, and deployable on fresh Linux environments without friction. My approach: 1. **Requirements review** – Lock down target data points: DNS enumeration, subdomain discovery, metadata extraction, and misconfigurations. 2. **Modular design** – Build dependency-light scripts with clear input/output contracts for seamless chaining. Python handles data processing and APIs; JavaScript covers browser-based reconnaissance if needed. 3. **Deployment** – Single-command install script, pinned dependencies, and reproducible test runs against a sample domain. 4. **Live engagement reliability** – Fast results without false positives. I'll implement rate-limit handling, error recovery for API failures, and clear logging for mid-engagement debugging. 5. **Resilience** – Retry logic with exponential backoff and easy endpoint swapping if services fail during assessment. I'm ready to start immediately. Let's discuss the details. Thanks, Denis.
$250 USD in 3 days
6.0
6.0

Hey, I can build the Python and JavaScript OSINT toolkit to automate DNS/subdomain discovery, metadata collection and common misconfiguration checks, while keeping the scripts portable and easy to adapt during testing. I’ll also include the README, pinned dependencies where needed, and a reproducible test-domain example on a fresh Linux setup. I’ve worked on Python automation and security-focused scripting before and can keep the implementation clean and practical. If you share the target workflow, I’d be happy to discuss the exact modules and testing approach. Best regards, Fahad.
$350 USD in 2 days
5.7
5.7

For this toolkit, I’d keep OSINT collection separate from impact-validation modules, so DNS, subdomain, metadata, and misconfiguration findings stay reusable while PoCs can be safely swapped or extended during an assessment. I can build the Python and JavaScript utilities with portability and maintainability as the two main priorities. Wherever native libraries are sufficient, I’d avoid dependencies; where packages materially improve reliability, versions would be pinned with a one-command setup. Output can be normalized to JSON/text so findings can feed directly into reports or follow-up validation steps. I handle projects end to end, including architecture, implementation, testing, documentation, and reproducible deployment. For security-sensitive tooling, I’d also keep scope controls explicit so test-domain examples and exploit demonstrations remain predictable and easy to modify during live engagements. The closest relevant project is FileChannels, where I worked on secure file sharing, password-protected documents, WebRTC, PubNub messaging, CRM integrations, browser extensions, and multiple client applications. That required working across authentication, access control, real-time communication, and integration boundaries rather than only frontend development.
$500 USD in 7 days
5.8
5.8

Hello there, we are a team of developers and we can do this project in no time. Please, send me a message to discuss the work. Thanks Ashish Kumar.
$500 USD in 7 days
5.4
5.4

Mapping the organisation's web surface requires handling dynamic JavaScript rendering for accurate subdomain discovery. I build this by using Puppeteer in Node.js, also Python scripts with BeautifulSoup for static analysis, chaining findings into proof-of-concept exploits. Do you have a preference for how detailed the web surface mapping should be, like specific types of links to prioritize? I need the scope confirmation to begin. 5.0 rating across 10 reviews, Preferred Freelancer.
$625 USD in 21 days
5.2
5.2

As a seasoned tech specialist with a proficiency in Automation and Python, I believe I'm the ideal candidate for your OSINT JS/Python Pen Testing project. Over the years, I've consistently demonstrated my ability to develop lean, efficient scripts that yield actionable results in penetration-testing scenarios. My core focus is automating open-source intelligence collection while ensuring portability and zero external dependencies as you require. Having worked on numerous red-team projects in the past, I understand firsthand what sets an impressive script apart. It's not just about raw data; it's about chain findings into insightful, impactful actionable steps. My solutions are designed with this very principle in mind. Additionally, my commitment to clear inline comments means that not only can you expect well-documented scripts, but also have the flexibility to tweak payloads during live tests. In terms of delivery, I believe in going beyond meeting expectations – it's about delivering results that can effortlessly "wow." So not only will I provide you with meticulously crafted source files and a detailed README covering all aspects of usage but also demonstrate successful data extraction against a test domain
$250 USD in 5 days
5.3
5.3

Hi, I've reviewed your project "OSINT JS/Python Pen Testing" and I have solid Python development experience, including building APIs with FastAPI, for work like this. I can put together a clean, well-tested implementation and keep you updated as I go. Happy to discuss the details.
$500 USD in 7 days
4.8
4.8

Node or Python for the toolkit's core scripts? I have built OSINT scrapers before, recon automation, data enrichment, the kind of thing that needs to run unattended without breaking on rate limits. I would structure each tool as a standalone module with clean docs so your team can plug new ones in fast. Can start today, first module ready in 3 days. Budget and timeline here are starting points, we will lock in real numbers once I see the full tool list. Let me know and I will send a plan.
$450 USD in 7 days
4.5
4.5

Hi! I can deliver this OSINT JS/Python Pen Testing** with clean architecture, modern UI, and full GitHub source code access. I have extensive experience building scalable web apps and AI-powered solutions. I have delivered 40+ similar production projects with fast turnaround and great communication. Quick question: do you already have any initial mockups or preferred API documentation ready? Available to start immediately — would love to discuss the details with you!
$325 USD in 3 days
4.7
4.7

Being in the software development industry for over eight years, I, Ankita, have acquired a vast skill set, where Python holds a special place. During my tenure, I've worked extensively on complex web and mobile solutions that involve secure data collection and analytical process. Combine my proficiency with Core OSINT techniques and offensive penetration-testing skills, I'm confident that I can deliver the toolkit you required - lean, portable, well-documented JavaScript and Python scripts. My key expertise isn't just about writing efficient code but also about understanding the requirements and producing real-world solutions. I take pride in delivering clean code with clear and precise comments that aid in live-test tweaking, and this aligns perfectly with your goal to examine pre-existing vulnerabilities by mapping an organization's web surface. ..
$500 USD in 7 days
4.7
4.7

Hello, I can build a lean, portable OSINT toolkit in Python and JavaScript for authorized penetration-testing engagements, focused on repeatable reconnaissance and assessment reporting. I’d structure the scripts to collect DNS/subdomain information, web-surface details, metadata, and common configuration issues, then normalize the findings into useful outputs that can support an assessment. Where proof-of-concept testing is required, I can keep it strictly within an authorized test environment and use safe, reproducible demonstrations rather than destructive payloads. I’ll keep dependencies minimal, pin versions where needed, add clear inline comments, and provide a concise README with installation, usage, inputs, and expected outputs. I’ll also package everything so a fresh Linux VM can reproduce the example run with a single setup command. I can provide relevant security/automation experience details honestly, but I won’t claim red-team projects I cannot verify. Looking forward to work with you. Thanks
$350 USD in 5 days
4.3
4.3

Hello Dear! Good Day! Hope you are doing fine. This is Ruhul Ajom Sagor. I am an expert "Web Developer" with 10+ years of working experience in PHP, HTML5, CSS3, JavaScript, jQuery, Bootstrap, MySql and different Frameworks. I have completed my B.S.C Engineering in Computer Science and Engineering (CSE) from BUET. Hire me and you don't have to worry about your website problems again! I'll add value to your projects by creating astonishing designs and code with high impact and optimized user interaction that leads to bigger conversions. WHAT PROBLEMS CAN I HELP YOU SOLVE? • Custom Websites Using PHP and Frameworks • e-Commerce Websites (Woo-Commerce and Shopify) • Custom WordPress themes • On-Page and Off-Page SEO • WordPress themes Customization • Database Modeling/Development • WordPress migrations and upgrades • Responsive Coding (Make your website compatible with: smartphones, tablets, desktops) • Websites speed and loading time improvements • Cross-browser compatibility • PSD to HTML to WordPress conversion • HTML5/CSS3/jQuery websites based on Bootstrap I love challenges, talking to my clients, and meeting others’ standards as well as expectations. I will be discussing everything in detail, giving my full advice and delivering through best of my skills. You are cordially welcome to discuss your project. Thank You! Best Regards, Ruhul Ajom
$250 USD in 7 days
4.9
4.9

Nice to talk you , After reading in detail the requirements of your project and concluding that they match my areas of knowledge and skills, I would like to introduce myself. My name is Anthony Muñoz and I am the lead engineer for DS Pro IT agency. I have worked for over 10 years in Backend and software development and have successfully done multiple jobs. It will be a pleasure to work together to make your project a reality. Please feel free to contact me. I´m looking forward to working with you. I really appreciate your time and remain attentive to any request or question. Greetings
$415 USD in 7 days
4.6
4.6

Hello, I have reviewed your requirements and can develop the JavaScript and Python toolkit for authorized OSINT and penetration-testing engagements. I have 10+ years of experience with Python, JavaScript, web security, automation, API testing and security-focused tooling. I can build portable scripts for DNS and subdomain enumeration, metadata collection, web-surface mapping and common configuration checks, with clear reporting and reproducible test-domain examples. WORKING FLOW: OSINT Collection → Automate authorized DNS, subdomain, metadata and web-surface discovery. Analysis → Organize findings and identify relevant security issues and misconfigurations. PoC Testing → Build safe proof-of-concept validation for confirmed findings within the authorized test scope. I can start with the test domain and structure the toolkit so it is easy to extend and maintain for future authorized assessments. Thanks, Invoke Tech
$350 USD in 5 days
4.2
4.2

As a seasoned professional with over a decade of comprehensive experience in automation, software architecture, and Python, I am confident in my ability to meet your OSINT JavaScript and Python pen-testing needs. My AI architecture work that consistently survives the transition from testing to real-world scenarios demonstrates my attention to real-life details in deployment rather than simply delivering something that performs impressively on paper. My past experience aligns well with your project specifications for automated collection of DNS, subdomain data, misconfigurations with a focus on actionable results. My ability to handle data processing, focusing on structured extraction from unstructured sources and semantic search also complements this project neatly. I assure you that, per your acceptance criteria, I will deliver well-documented scripts with clear, inline comments and minimal dependencies for easy installation and maintenance. In closing, my work ethic revolves around ensuring clients receive solutions that work efficiently, without hidden bugs or bots that fall apart at first contact with real-life data. Given the high stakes nature of penetration-testing engagements, choosing me ensures you leverage the hands-on experience of an adept freelancer who has repeatedly proven his ability to deliver just what clients need- powerful tools that perform flawlessly even in high-pressure scenarios.
$444 USD in 7 days
4.1
4.1

Hi, Do you have a target test domain in mind already? I write Python and Node automation scripts like this, so this OSINT toolkit fits my main work. Lets get in contact first.
$250 USD in 5 days
3.8
3.8

Hello, I can build a modular OSINT toolkit that chains raw data into actionable exploits without bloating the code with unnecessary abstractions. I’ve built similar scripts for red-team engagements—one Python tool identified exposed S3 buckets by parsing misconfigured CORS headers, and a Node.js scraper mapped a client’s API endpoints by monitoring traffic during a simulated attack. I’d structure the toolkit as a set of independent scripts with shared utility functions to avoid duplication, then add lightweight wrappers to format outputs for reports. The biggest challenge will be balancing automation with flexibility so you can tweak payloads mid-test. The real value comes from reducing manual work—once the scripts are set up, you’ll spend less time gathering data and more time analyzing threats. I’ll include version-pinned dependencies in the README and document each script’s purpose so you can swap components without rewriting logic. If this aligns with your needs, I’d be happy to discuss the exact scope and test cases upfront. Thanks, Lazar.
$250 USD in 2 days
4.1
4.1

Naga City, Philippines
Member since May 30, 2026
$10-30 USD
$30-250 USD
$30-250 USD
€30-250 EUR
$30-300 USD
$100-300 USD
$250-750 USD
$250-750 USD
$15-25 USD / hour
₹12500-37500 INR
$750-1500 CAD
$30-250 NZD
$250-750 USD
₹1500-12500 INR
$30-250 USD
₹1250-2500 INR / hour
$30-250 USD
$10-100 CAD
€250-750 EUR
$30-40 USD