Information

I have built a website to sell my merch on. You can find it over at [REDACTED] and I want to iron out the security flaws before we go live. The functionality is as follows:

• See products
• Search products
• Add to cart
• Clear cart fully
• Purchase items (mocked, not a real payment. Does not reduce stock.)

Deliverables

The ethical hacker: Please do mail this contract of engagement, the signed NDA and a test plan to [email protected].

The requester: Within 48 hours of receiving the signed and in order documents, the requester will send out the unique environment information to the participant.

After the test is over the participant will provide:

• A test report to which they will get feedback
• A debriefing voice/video message

The requesting party will provide feedback on any step of the process if required.

This constitutes a contract of engagement.

Signed:_________________________________ Name: _________________________________ Title: __________________________________ Date: ________________ RECIPIENT (The XSS Rat) Signed:_________________________________ Name: The XSS Rat (Wesley Thijs) Title: President / Security Engineer Date: ________________