Android Penetration Tester Needed
Budget: $30 – $250 USD
I’m ready to put my Android app through a real-world security workout and need a specialist who can think like an attacker yet report like an auditor. You will receive full access to the APK, source code, staging backend, and any supporting keys or test accounts so you can assess the entire surface without restriction.
The engagement is focused on penetration testing aimed at uncovering security vulnerabilities—everything from improper authentication flows to insecure data storage and weak crypto implementations. Feel free to bring your own toolkit: Burp Suite, Frida, MobSF, JADX, ADB, OWASP Mobile Top 10 checklists—whatever helps you pry, probe, and break things responsibly.
Deliverables
• A written report that ranks each finding by severity, explains the exploit path, includes reproducible steps or PoC scripts, and recommends concrete fixes.
• An executive-level summary I can share with non-technical stakeholders.
• A follow-up retest (after patches) to verify that critical issues are resolved.
Acceptance Criteria
The project is complete when I receive a clear, actionable report with no glaring gaps in coverage and can confirm—via the retest—that previously identified high-risk vulnerabilities have been mitigated.
If you have a portfolio of past mobile security audits or relevant certs (OSCP, OSWE, etc.), let’s talk.
The engagement is focused on penetration testing aimed at uncovering security vulnerabilities—everything from improper authentication flows to insecure data storage and weak crypto implementations. Feel free to bring your own toolkit: Burp Suite, Frida, MobSF, JADX, ADB, OWASP Mobile Top 10 checklists—whatever helps you pry, probe, and break things responsibly.
Deliverables
• A written report that ranks each finding by severity, explains the exploit path, includes reproducible steps or PoC scripts, and recommends concrete fixes.
• An executive-level summary I can share with non-technical stakeholders.
• A follow-up retest (after patches) to verify that critical issues are resolved.
Acceptance Criteria
The project is complete when I receive a clear, actionable report with no glaring gaps in coverage and can confirm—via the retest—that previously identified high-risk vulnerabilities have been mitigated.
If you have a portfolio of past mobile security audits or relevant certs (OSCP, OSWE, etc.), let’s talk.