8 hour project - VAPT Testing - Test a WEB application for me
Budget: $30 – $250 AUD
Before you bid, please check our "Client profile" on Freelancer.com
We are an established employer. Quick and correct work will earn you positive feedback and timely payment.
**************************************************************************************************
Project description :
Manual Web Application Penetration Tester Needed
We are looking for an experienced penetration tester to perform a manual VAPT on a production web application.
The testing CANNOT be automated or run via an AI script. It CANNOT be outsourced via code. Please do not waste your valuable time trying to do either.
Scope:
Public website and authenticated user portal
Manual testing following OWASP methodology
Limited use of automated scanners for verification only
Test for authentication, authorization, business logic, injection, XSS, CSRF, file uploads, API security, and common web vulnerabilities
Provide a detailed report with severity ratings, proof of concept, remediation guidance, and one retest after fixes
Please include:
Relevant experience
Your certifications (Examples: OSCP, OSWE, eWPT or equivalent.)
Sample redacted report
Estimated duration and fixed-price quote
What we are looking for - Your ideal skills and experience:
- Strong web testing skills
- Excellent attention to detail
- Ability to work efficiently and meet strict deadlines
- Thorough and complete effort
- Knowledge of website testing and validation techniques
Your VAPT report should include
Authentication and session management
Authorization and privilege escalation
Business logic flaws
SQL Injection
Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)
File upload vulnerabilities
API security
Security headers
Sensitive information disclosure
Misconfigurations
Deliverables:
Your final report should include:
Executive summary
Technical findings
Risk ratings
Proof of concept
Remediation recommendations
Note: Only freelancers with relevant qualifications in VAPT testing should apply. Accuracy and efficiency are crucial for this project.
*******************************************************************************************************
Please bid only if you have previous experience and can deliver within the time specified, otherwise do not waste your valuable bid. Work must be 100% clean and professional
Timely, sincere work will earn positive feedback and prompt payment. So take the task seriously, and show us your best work.
Best of luck in your bid!
We are an established employer. Quick and correct work will earn you positive feedback and timely payment.
**************************************************************************************************
Project description :
Manual Web Application Penetration Tester Needed
We are looking for an experienced penetration tester to perform a manual VAPT on a production web application.
The testing CANNOT be automated or run via an AI script. It CANNOT be outsourced via code. Please do not waste your valuable time trying to do either.
Scope:
Public website and authenticated user portal
Manual testing following OWASP methodology
Limited use of automated scanners for verification only
Test for authentication, authorization, business logic, injection, XSS, CSRF, file uploads, API security, and common web vulnerabilities
Provide a detailed report with severity ratings, proof of concept, remediation guidance, and one retest after fixes
Please include:
Relevant experience
Your certifications (Examples: OSCP, OSWE, eWPT or equivalent.)
Sample redacted report
Estimated duration and fixed-price quote
What we are looking for - Your ideal skills and experience:
- Strong web testing skills
- Excellent attention to detail
- Ability to work efficiently and meet strict deadlines
- Thorough and complete effort
- Knowledge of website testing and validation techniques
Your VAPT report should include
Authentication and session management
Authorization and privilege escalation
Business logic flaws
SQL Injection
Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)
File upload vulnerabilities
API security
Security headers
Sensitive information disclosure
Misconfigurations
Deliverables:
Your final report should include:
Executive summary
Technical findings
Risk ratings
Proof of concept
Remediation recommendations
Note: Only freelancers with relevant qualifications in VAPT testing should apply. Accuracy and efficiency are crucial for this project.
*******************************************************************************************************
Please bid only if you have previous experience and can deliver within the time specified, otherwise do not waste your valuable bid. Work must be 100% clean and professional
Timely, sincere work will earn positive feedback and prompt payment. So take the task seriously, and show us your best work.
Best of luck in your bid!