E-Procurement Web App Penetration Test
Employer not named by the sourceRemote
Frontier is not the employer and does not collect applications.
About this role
PHP, Linux, Web Security, MySQL, HTML, Bootstrap, Penetration Testing, Technical Documentation, Risk Assessment, Security Auditing · I run a custom-built e-procurement platform (PHP, Bootstrap front-end, MySQL) hosted on a private AlmaLinux VM and administered through DirectAdmin. Before pushing new features live, I need a thorough penetration test that zeroes in on web-application weaknesses.
Please quote separately for a Black-Box assessment (no internal knowledge) and a Grey-Box assessment (limited credentials or code snippets provided). The goal is to understand how each testing style changes the risk picture and the remediation roadmap.
Scope of the engagement • Authentication & authorization • Input validation & sanitization • Session management
You may explore any additional vectors necessary to fully cover those three areas, but infrastructure, network layers, and the database engine itself are outside today’s brief unless they directly impact the web layer.
Required deliverables 1. Concise executive summary suitable for non-technical stakeholders. 2. Detailed technical report with step-by-step findings, proof-of-concept evidence, CVSS scoring, and prioritized remediation guidance. 3. Retest verification list so we can confirm fixes in a follow-up sprint.
I’m comfortable with widely ac