Application Penetration Testing
Publicada el 2026-07-19
Descripción de la oferta
I need a focused penetration test against one of my applications. The engagement is limited strictly to the application layer—no network or infrastructure testing—so I expect you to probe for the kinds of issues highlighted in the OWASP Top 10 and similar standards. Here’s how I picture the engagement: • Pre-engagement call to confirm scope, test window, and rules of engagement • Hands-on testing that blends automated scans (Burp Suite, OWASP ZAP, or your preferred tools) with manual verification and exploitation where safe • A concise yet comprehensive report that includes an executive summary, risk ratings (CVSS v3 or equivalent), step-by-step reproduction, screenshots or PoC scripts, and clear remediation guidance • An optional debrief session to walk me through the findings and answer questions Timeline is flexible but I’d like testing wrapped up within a week of kickoff and the report delivered shortly after. When you reply, focus on your experience with application security testing—particularly recent penetration tests you have conducted—and, if possible, share a redacted sample report so I can see the depth of your work.
Skills
Fuente original: freelancer