Android Device Security Audit – Ethical Hacking Required

Scope of Work:

Test the security of Gmail-based authentication (OAuth 2.0 flow)

Identify potential flaws in token handling, session management, and data leakage

Evaluate how securely user data is stored and transmitted

Check for vulnerabilities listed in the OWASP Mobile Top 10

Recommend fixes for any identified issues

Requirements:

Experience with Android app pentesting

Familiarity with OAuth 2.0, JWT, and token-based authentication

Tools: Burp Suite, MobSF, Frida, or equivalent

Must follow ethical hacking practices with proof of authorization
Deliverables:


Full vulnerability report

Recommendations and suggested remediations

Screenshots or PoCs (if needed)