Web Penetration Testing Specialist
Budget: ₹750 – ₹1,250 INR
I’m looking for an experienced security tester to run a full-scale penetration test on my web application stack. Web security is the only focus here, so please come prepared with a proven methodology that aligns with OWASP-Top-10 practices and the latest exploits in mind.
Scope
• Map and enumerate the application, then attempt to exploit any weakness you find—authentication, sessions, input validation, business logic, configuration, the works.
• Produce a concise, evidence-based report that ranks each finding by risk, explains impact, and includes clear remediation steps my dev team can action immediately.
• A short retest is expected once fixes are applied.
Tools you’re comfortable with matter to me. If Burp Suite Pro, OWASP ZAP, Metasploit, Nessus, Nmap, or similar are already in your toolbox, tell me so; proprietary scripts are welcome too.
Timing & Collaboration
I’ll grant you test credentials and a staging URL as soon as we agree on the approach. Communication can be daily or milestone-based—whatever keeps progress transparent.
If your background also covers e-commerce storefronts, corporate sites, or custom portals, highlight that experience; the techniques often overlap and could prove useful down the line.
When you reply, please outline:
• Your preferred testing stack
• A rough schedule for reconnaissance, exploitation, reporting, and retest
• Sample redacted report or template, if possible
I’m ready to move quickly once I find the right tester.
Scope
• Map and enumerate the application, then attempt to exploit any weakness you find—authentication, sessions, input validation, business logic, configuration, the works.
• Produce a concise, evidence-based report that ranks each finding by risk, explains impact, and includes clear remediation steps my dev team can action immediately.
• A short retest is expected once fixes are applied.
Tools you’re comfortable with matter to me. If Burp Suite Pro, OWASP ZAP, Metasploit, Nessus, Nmap, or similar are already in your toolbox, tell me so; proprietary scripts are welcome too.
Timing & Collaboration
I’ll grant you test credentials and a staging URL as soon as we agree on the approach. Communication can be daily or milestone-based—whatever keeps progress transparent.
If your background also covers e-commerce storefronts, corporate sites, or custom portals, highlight that experience; the techniques often overlap and could prove useful down the line.
When you reply, please outline:
• Your preferred testing stack
• A rough schedule for reconnaissance, exploitation, reporting, and retest
• Sample redacted report or template, if possible
I’m ready to move quickly once I find the right tester.