Target: 
- hackxpert.com

OoS:
- No API testing

Rules of engagement: 
- Site and network testing 
- No destructive testing
- Upon foothold, stop and report
- Anything critical, report ASAP 
- No special access needed
- Registration is okay, posting as well but 
— DMs only to admin (userid = 8) or your own users
- No DoS
- You can keep testing after engagement under same rules
- Distributed testing recommended 
- Timeframe of briefing + test plan creation: 72h
- Timeframe of testing: 1week 
- Timeframe of report + debrief: 72h
- Password protected zip