Mobile App Security Penetration Test
Budget / Salary€250–750
TypeFreelance project
LocationRemote
Posted1 hour ago
I need a seasoned penetration tester to probe the security of my production-ready mobile app on both Android and iOS. The first priority is the app itself; backend and API endpoints can follow only if weaknesses in the binaries point that way.
My single, overriding goal is to find out whether an attacker could access or steal sensitive user data—specifically photos, messages, location details, and contact information that the app stores or transmits. I expect you to approach the assessment exactly as a real-world adversary would, using recognised methodologies such as OWASP Mobile Top 10, dynamic analysis, and code review where possible.
Deliverables
• A clear, reproducible vulnerability report for each issue, including risk rating and affected OS/version
• Proof-of-concept evidence (screens, logs, or video) showing how data could be compromised
• Actionable remediation steps ranked by priority
I’m happy to provide test accounts, current builds, and any required certificates once we agree on scope and timeline.
My single, overriding goal is to find out whether an attacker could access or steal sensitive user data—specifically photos, messages, location details, and contact information that the app stores or transmits. I expect you to approach the assessment exactly as a real-world adversary would, using recognised methodologies such as OWASP Mobile Top 10, dynamic analysis, and code review where possible.
Deliverables
• A clear, reproducible vulnerability report for each issue, including risk rating and affected OS/version
• Proof-of-concept evidence (screens, logs, or video) showing how data could be compromised
• Actionable remediation steps ranked by priority
I’m happy to provide test accounts, current builds, and any required certificates once we agree on scope and timeline.
Apply on Freelancer →
Project sourced from Freelancer.com. Applications happen directly on the original platform — we never collect your data.