Ethical iOS Penetration Tester
Budget: £20 – £250 GBP
I am running a strictly white-hat engagement across several of my own iOS devices that sit on different networks and domains. The goal is to push each target as far as an ethical penetration test will allow and document every weakness uncovered.
Scope
• App-layer probing, OS-level hardening checks, and live network traffic inspection are all in scope.
• Devices run iOS 15 (and below) as well as iOS 16, none are jailbroken and most are managed through MDM profiles.
• You will have remote access or shipped test builds where needed; I can provision enterprise certificates if required.
What I need from you
Experience breaking down Apple’s security stack, from app sandboxing through kernel mitigations and transport-layer defenses. A comfort level with tools such as Burp Suite, Frida, Xcode, LLDB or equivalent is expected—you may use your own preferred toolkit as long as the results are reproducible.
Deliverables
• A step-by-step penetration report detailing methodology, findings, and risk ratings
• Proof-of-concept exploits or reproducer scripts for each confirmed vulnerability
• Remediation guidance mapped to each issue
• A short debrief call to walk me through the results
Payment is performance-weighted: the deeper the valid penetration, the higher the payout. If this fits your specialised skill set, tell me how you would tackle the assessment and share a brief example of a past iOS security win you can publicly reference.
Scope
• App-layer probing, OS-level hardening checks, and live network traffic inspection are all in scope.
• Devices run iOS 15 (and below) as well as iOS 16, none are jailbroken and most are managed through MDM profiles.
• You will have remote access or shipped test builds where needed; I can provision enterprise certificates if required.
What I need from you
Experience breaking down Apple’s security stack, from app sandboxing through kernel mitigations and transport-layer defenses. A comfort level with tools such as Burp Suite, Frida, Xcode, LLDB or equivalent is expected—you may use your own preferred toolkit as long as the results are reproducible.
Deliverables
• A step-by-step penetration report detailing methodology, findings, and risk ratings
• Proof-of-concept exploits or reproducer scripts for each confirmed vulnerability
• Remediation guidance mapped to each issue
• A short debrief call to walk me through the results
Payment is performance-weighted: the deeper the valid penetration, the higher the payout. If this fits your specialised skill set, tell me how you would tackle the assessment and share a brief example of a past iOS security win you can publicly reference.