Game Network Penetration Testing
Budget: $30 – $250 USD
I need an experienced security expert to evaluate the network layer of our multiplayer game infrastructure. This evaluation is limited to penetration testing and does not include reverse engineering or anti-cheat development. The evaluation must cover three core activities: port scanning (mapping all exposed services), vulnerability scanning (identifying exploitable weaknesses), and intrusion detection testing (evaluating the responsiveness of our current monitoring systems to actual attack patterns). Vulnerability reproduction needs to be written into a simple user interface script.
You will be using a test copy of the production environment for the evaluation, which includes the login server, matchmaking server, and in-game transaction server. Upon completion of the testing, I expect to receive a concise technical report including:
• All open ports and the services running on them
• Confirmed vulnerabilities and their CVSS scores and proof-of-concept evidence
• Vulnerabilities or missed detections found in our IDS/IPS stack
• Practical, prioritized remediation steps
Please describe the main toolset you plan to use—common tools include Nmap, Nessus, OpenVAS, Metasploit, and Snort—but I am open to any tool that can provide reliable results. All tests must be conducted within the agreed maintenance window and must not cause any interruption to online user service.
If you have recent experience hardening game servers or similar low-latency, high-availability systems, this will be of great benefit to you. (The script interface is similar to the image.)
You will be using a test copy of the production environment for the evaluation, which includes the login server, matchmaking server, and in-game transaction server. Upon completion of the testing, I expect to receive a concise technical report including:
• All open ports and the services running on them
• Confirmed vulnerabilities and their CVSS scores and proof-of-concept evidence
• Vulnerabilities or missed detections found in our IDS/IPS stack
• Practical, prioritized remediation steps
Please describe the main toolset you plan to use—common tools include Nmap, Nessus, OpenVAS, Metasploit, and Snort—but I am open to any tool that can provide reliable results. All tests must be conducted within the agreed maintenance window and must not cause any interruption to online user service.
If you have recent experience hardening game servers or similar low-latency, high-availability systems, this will be of great benefit to you. (The script interface is similar to the image.)