Web App Penetration Test -- 2
Budget: $3,000 – $5,000 USD
I need a thorough web application penetration test with the single goal of uncovering every possible security vulnerability. The assessment must zero-in on our authentication mechanisms, input validation and sanitization routines, and session management logic.
I will give you staging-environment credentials and API documentation as soon as we kick off. From there, you are free to use the standard toolkit—Burp Suite, OWASP ZAP, Kali-based utilities, manual code review, or any other methodology that aligns with OWASP Top 10 best practices—so long as the approach is non-destructive and the findings are reproducible.
Deliverables
• A concise executive summary highlighting critical issues
• A detailed technical report for each finding, including risk rating, reproducible proof-of-concept steps, and remediation advice
• A retest after fixes (included in scope) to confirm vulnerabilities are closed
All testing must remain strictly within the agreed scope and time window to avoid disrupting production traffic. If you have relevant certifications (OSCP, GWAPT, etc.) let me know when you respond.
I will give you staging-environment credentials and API documentation as soon as we kick off. From there, you are free to use the standard toolkit—Burp Suite, OWASP ZAP, Kali-based utilities, manual code review, or any other methodology that aligns with OWASP Top 10 best practices—so long as the approach is non-destructive and the findings are reproducible.
Deliverables
• A concise executive summary highlighting critical issues
• A detailed technical report for each finding, including risk rating, reproducible proof-of-concept steps, and remediation advice
• A retest after fixes (included in scope) to confirm vulnerabilities are closed
All testing must remain strictly within the agreed scope and time window to avoid disrupting production traffic. If you have relevant certifications (OSCP, GWAPT, etc.) let me know when you respond.