Android App Vulnerability Analysis
Budget: ₹12,500 – ₹37,500 INR
I have an Android APK that must be taken apart, inspected, and stress-tested so I can see exactly where attackers could slip through. The sole objective is to identify vulnerabilities—no feature work, no code recovery, just a security deep dive.
What you will do
The job calls for classic Android reverse-engineering techniques: unpack the APK, de-obfuscate where possible, step through the code with JADX or similar, and hook live calls with tools such as Frida or Xposed to watch data flow. Network traffic, storage, inter-process communication, and custom crypto routines all need attention so any flaw—from insecure logging to poorly handled intents—pops out clearly.
Expected outcome
• A concise report that lists each vulnerability, explains the risk, and shows a reproducible proof-of-concept or trace.
• Clear remediation advice for every issue you uncover.
• Screenshots or captured logs that back up your findings.
I will supply the release and debug builds, plus any credentials needed for authenticated areas. The engagement is complete once I can replicate your proofs and the report reads cleanly for my developers to action.
What you will do
The job calls for classic Android reverse-engineering techniques: unpack the APK, de-obfuscate where possible, step through the code with JADX or similar, and hook live calls with tools such as Frida or Xposed to watch data flow. Network traffic, storage, inter-process communication, and custom crypto routines all need attention so any flaw—from insecure logging to poorly handled intents—pops out clearly.
Expected outcome
• A concise report that lists each vulnerability, explains the risk, and shows a reproducible proof-of-concept or trace.
• Clear remediation advice for every issue you uncover.
• Screenshots or captured logs that back up your findings.
I will supply the release and debug builds, plus any credentials needed for authenticated areas. The engagement is complete once I can replicate your proofs and the report reads cleanly for my developers to action.