Betting Site Pen-Test
Budget: ₹1,500 – ₹12,500 INR
I need a seasoned web-security researcher to perform an authorized assessment of an online betting platform. My highest priorities are bet integrity and the underlying backend security: I want to know, with evidence, whether a wager that has already been placed can be altered while it is running or after it has closed, and whether the current defenses are sufficient to prevent such manipulation.
Because I do not have source-code access, the engagement will be a black-box exercise. Please combine automated tooling (for example Burp Suite, OWASP ZAP, SQLmap, etc.) with hands-on manual penetration testing so that I receive both breadth and depth of coverage.
Deliverables I expect:
• A concise technical report detailing every identified vulnerability, including risk rating and business impact on bet integrity and backend operations
• Clear reproduction steps or proof-of-concepts for each finding
• Recommended remediation or mitigation actions, prioritised by severity
• A short executive summary that I can share with non-technical stakeholders
Only researchers with proven experience in web application security, backend exploitation, and gambling or fintech platforms should apply. All testing must respect legal boundaries; you will work under a mutually signed authorisation letter.
If you are confident you can uncover—and safely demonstrate—any weakness that could let an attacker tamper with bets or backend data, I look forward to your proposal and to agreeing a timeline together.
Because I do not have source-code access, the engagement will be a black-box exercise. Please combine automated tooling (for example Burp Suite, OWASP ZAP, SQLmap, etc.) with hands-on manual penetration testing so that I receive both breadth and depth of coverage.
Deliverables I expect:
• A concise technical report detailing every identified vulnerability, including risk rating and business impact on bet integrity and backend operations
• Clear reproduction steps or proof-of-concepts for each finding
• Recommended remediation or mitigation actions, prioritised by severity
• A short executive summary that I can share with non-technical stakeholders
Only researchers with proven experience in web application security, backend exploitation, and gambling or fintech platforms should apply. All testing must respect legal boundaries; you will work under a mutually signed authorisation letter.
If you are confident you can uncover—and safely demonstrate—any weakness that could let an attacker tamper with bets or backend data, I look forward to your proposal and to agreeing a timeline together.