Android App Penetration Test Needed - 27/07/2026 23:30 EDT
Publicada el 2026-07-28
Descripción de la oferta
I am ready to grant full, legal authorization to test my proprietary Android application and uncover any real-world weaknesses before we push the next release. The scope is strictly penetration testing—no static code analysis or broad vulnerability scans—focused on three critical areas: • Authentication mechanisms • Data storage and encryption (on-device and in transit) • Network communication with our backend and third-party services Additionally, the freelancer must focus on identifying vulnerabilities in the platform's user management system, database security, and access controls to address data leaks and unauthorized access to customer information. You will receive an APK, a test account, and API documentation so you can replicate normal user flows as well as edge-case scenarios. Rooted device tooling, Burp Suite, Frida, and any other standard Android security utilities are welcome as long as testing remains non-destructive. Acceptance criteria 1. A clear, prioritized findings report that includes proof-of-concept steps or screenshots for each exploitable issue. 2. Practical remediation guidance mapped directly to the vulnerable code paths or configurations. 3. A short debrief call or recorded walkthrough to ensure my dev team fully understands each finding. Timeline and milestones are flexible; quality and thorough coverage matter most. Let me know about any required permissions or test data ahead of time so everything runs smoothly.
Skills
Fuente original: freelancer