Pentest · OWASP ASVS · E-commerce · Red Team
CASE #PT-1182 · penetration test of an e-commerce platform before Black Friday
One of Türkiye's top 5 e-commerce platforms · 14 days to Black Friday. A full-scope web + mobile + API pentest. PCI-DSS scope · 3M active customers · 8 million card records. OWASP ASVS L2 is mandatory. You will make 11 critical decisions in sequence.
Before you start the scenario
- You are the decision-maker in this incident · every choice leaves time/cost/reputation behind
- There are no wrong answers · just like in real life · but some paths are more expensive
- You can restart it anytime · try different paths
- At the end, a 3-axis score + alternative routes are shown