Web App XSS Penetration Test
Employer not named by the sourceRemote
Frontier is not the employer and does not collect applications.
About this role
Testing / QA, Computer Security, Technical Writing, Website Testing, Penetration Testing, XSS (Cross-site scripting), Incident Response, Security Auditing · I need an experienced penetration tester to focus exclusively on our React-based web application and uncover every possible Cross-Site Scripting (XSS) weakness and any network weakness. You will receive access to a staging instance, user roles, and any documentation you need so you can test thoroughly without disrupting production.
Your task is to emulate a real attacker: map the full attack surface, attempt both reflected and stored XSS, and verify any bypasses of our current content-security policies. Please keep notes as you go; a concise, well-structured report is the final deliverable.
Additionally, the scope includes authenticated, unauthenticated, and mobile app tests. Testing will occur closer to November after development and infrastructure updates are complete. The budget for this project is 2,000 AUD.
Deliverables: • Step-by-step description of each XSS finding with proof-of-concept payloads and impact assessment • Clear reproduction steps we can hand to developers • Practical remediation advice that aligns with modern React best practices • A short re-test summary once fixes are in place
If you already have a proven toolkit for React applications—Burp Suite,