we are after a pen testing to test a vulnerability of a website.
basically on the site theres a online shopping system that user can purchase virtual currency via paypal or credit card. and once
payments goes through the user is allocated points to their account.
we want to see if that payment can be bypassed and points automatically added to their user account and without it being detected.
you will be required to create 5 user accounts and allocate points to those account, and prove that it is possible.
[url removed, login to view] is the webapp thats used for the payments.
once your work is done, we will be required to provide all your resources that you used and step by step as to how it was done. so that we can fix
more information can be provated upon request including the sitename
serious security experts only.