Vibe App Penetration Testing

My “Vibe” coded platform is live, and before I push the next feature set I need a focused web-application penetration test to surface any real-world weaknesses. The priority is straightforward: identify vulnerabilities, not simply tick compliance boxes. Scope • Full assessment of the authentication flow, including any forgotten-password logic, multi-factor hooks, and privilege escalation paths. • Rigorous input validation checks to uncover injection points (SQL, XSS, command, etc.) across forms, API endpoints, and WebSocket traffic. • Deep dive into session management: token generation, storage, expiration, and potential fixation or hijacking vectors. I’m comfortable with established toolkits like Burp Suite, OWASP ZAP, sqlmap, and custom scripts—use what you feel delivers the clearest evidence. Please provide a concise report that details: (1) each finding with reproduction steps, (2) severity ranking and suggested remediation, and (3) proof-of-concept screenshots or traffic captures where relevant. Access to a staging URL, test credentials, and API documentation will be furnished on kickoff. The engagement is considered complete when all critical and high issues are reproducible from your report and I have an actionable mitigation plan. If you have recent experience testing modern JavaScript stacks and can schedule the test soon, let me know your proposed timeline and any clarifying questions.

Project ID: 40739363