Mobile App Pen-Test Needed

@onkarkulkarni8

Hello, I checked your "Mobile App Pen-Test Needed" project description, it looks like the focus is on delivering a clean, responsive website that works well across all devices. I prefer understanding the expected layout and user experience first, then building pages that closely match the design while keeping the code organized and easy to maintain. Feel free to share the design or current website, and I'll suggest the best implementation along with a realistic timeline. Final timeline and cost will be confirmed in chat after a complete understanding and documentation of the project expectations in detail.

@ravichedwal

With a plethora of successful projects under my belt, I am not only a Full Stack Developer but also an experienced Mobile App Developer. My expertise includes both Android and iOS development, making me the ideal candidate for your project. Over the years, I have accumulated solid experience in building secure and robust applications- exactly what your project demands. Moreover, my flexibility works in your favor as it implies that I can adapt to varying project demands - hourly, fixed cost, dedicated team or hybrid. This means that I can also readily support your requirement of agile methodologies and assured swift delivery without any compromise on quality or security.

@kajal1992

Hello, I can conduct a thorough white-hat security assessment of your iOS and Android applications, covering both the mobile clients and supporting APIs. My assessment will follow the OWASP Mobile Security Testing Guide and include static and dynamic analysis using Burp Suite, Frida, MobSF, JADX/APKTool, and other appropriate tools. Coverage includes: • Authentication, authorization & session management • API security and business-logic testing • Local storage, cryptography & sensitive-data exposure • SSL/TLS and certificate-pinning assessment • Reverse engineering and client-side security • Third-party SDK/library risks • Input validation and common OWASP Mobile/API vulnerabilities • Runtime manipulation and tampering scenarios **Deliverables:** • Executive risk summary • Detailed technical VAPT report with reproducible PoCs, CVSS severity, evidence and remediation • PDF + editable report • Remediation-focused recommendations • Follow-up retest to verify fixes I will work strictly within the authorized scope and use only the provided staging builds/test credentials. No client data will be retained after the engagement. Estimated timeline: 5–7 days for the initial assessment and 1–2 days for the retest, depending on application/API complexity. I have extensive hands-on experience in mobile application security, API VAPT, reverse engineering and digital forensics, and can provide a clear, developer-friendly report your team can act on immediately. Regards, Kajal

@poojatdsl

✓ Available to start immediately and can perform a controlled white-hat mobile security assessment across your iOS/Android apps, staging APIs and authentication flows. The focus will be identifying reproducible vulnerabilities with clear remediation steps, without affecting production systems or retaining client data after the engagement. I can handle: • OWASP Mobile Security Testing Guide-aligned assessment • Static analysis of mobile binaries/source where provided • Dynamic runtime and network testing • Authentication, session and authorization testing • API security and input-validation testing • Local storage, tokens, logs and sensitive-data exposure • TLS/network communication checks • Third-party SDK/dependency review • MobSF, Burp Suite and appropriate mobile testing tooling • Documented PoC/reproduction steps for confirmed findings • Severity and remediation recommendations • Retest after fixes Deliverables: executive summary + detailed technical report, reproducible findings, remediation roadmap, PDF/editable report and final retest results. Testing can remain isolated to the provided staging builds, test credentials and authorized backend endpoints. ✓ Ready to review the staging builds, API documentation and test credentials and define the initial assessment scope.

@nathanholmes

A mobile penetration test like this needs to go beyond automated scanning—the important part is proving whether issues are genuinely exploitable and giving your development team remediation steps they can reproduce and verify. I’d keep the assessment strictly within the agreed staging scope and test credentials you provide. I’d assess both **iOS and Android** across the client applications, API traffic, authentication/session handling, local storage, network security, third-party dependencies, and relevant backend endpoints. I’d combine static and dynamic techniques using tools such as **Burp Suite, MobSF, Frida**, and platform-specific analysis, following an OWASP Mobile Security Testing Guide–aligned methodology. Each finding would include clear evidence, reproducible proof-of-concept steps, severity, affected component, remediation guidance, and supporting screenshots/logs where useful. I’d deliver the executive summary and detailed technical report in **PDF and editable format**, then perform a retest after remediation to verify that critical findings are properly closed. I’d estimate **5–7 days for the initial assessment** and **1–2 days for the retest**, depending on scope and app

@ssquare489

For this iOS/Android assessment, I’d structure testing around OWASP mobile methodology and make reproducibility the priority, so each reported issue gives your developers enough evidence to verify, remediate, and retest it without ambiguity. The assessment would cover authentication/session handling, API authorization, sensitive-data exposure, local storage, transport security, mobile configuration, dependency risks, and relevant client-side controls. My priorities would be clean implementation and maintainability: findings would include severity, affected component, reproduction steps, evidence, impact, and specific remediation guidance rather than scanner output alone. I’m comfortable reviewing mobile/backend architectures and working with API, authentication, data-storage, and application security concerns, but I would not claim a dedicated mobile penetration-testing case study that isn’t in my documented portfolio. I’d estimate 7–10 business days for the initial assessment and reporting, with the follow-up retest typically requiring 2–3 days once fixes are ready. Reports can be provided in PDF and editable format, with test data removed after completion.

@rakhshanz3

As a seasoned technologist with a focus on security, I understand the importance of comprehensive penetration testing and the role it plays in fortifying mobile applications. Drawing from my extensive Android and iOS app development background, I'm proficient in industry-standard security methodologies like OWASP and deployment/use of tools such as Burp Suite, Frida, and MobSF for dynamic and static analysis. at lists each vulnerability accompanied by foolproof steps for reproducibility and suggested remediation strategies. Furthermore, my proficiency with scalable architecture ensures the successful implementation of any fixes we identify throughout the retest phase. It'd be truly rewarding to work on your project not just because it matches my proficiencies but also because it presents an excellent opportunity

@vijaydogra03

Hello, I'll follow OWASP MASTG as the structural framework throughout, ensuring nothing gets missed across client apps, API layer, auth flows, local storage, and third-party dependencies, rather than testing opportunistically. My approach: static analysis first using MobSF for a fast baseline (hardcoded secrets, insecure storage flags, manifest/permission issues, weak crypto), then dynamic analysis with Frida for runtime manipulation (bypassing certificate pinning if present, inspecting in-memory data, hooking sensitive functions) and Burp Suite for intercepting API traffic, testing auth token handling, session management, and authorization boundaries specifically, e.g. accessing another user's data via ID manipulation. I'll test local storage on both platforms for sensitive data left unencrypted, and review third-party libraries for known CVEs relevant to your specific versions. Every finding includes clear proof-of-concept reproduction steps, a severity rating, and concrete remediation your dev team can act on directly, not vague "improve security" notes. Deliverables: executive summary, detailed technical report in PDF and editable format, and a retest once fixes deploy to confirm critical issues are genuinely closed. I confirm no test data will be retained once the engagement ends. Timeline: roughly 1-2 weeks for the initial assessment, plus 2-3 days for retest. Ready to start once staging access and credentials are provided. Best regards, Vijay Kumar Dogra

@modesorehari6

⭐⭐⭐Hi there, From Your Vision To Successful — I will take responsibility⭐⭐⭐ I can deliver a thorough white hat security assessment for your iOS and Android applications with clear reproducible findings and practical remediation guidance. I have relevant experience in mobile application and API penetration testing including authentication security local storage API traffic and third party components. I am comfortable with OWASP Mobile Security Testing Guide workflows and tools such as Burp Suite Frida and MobSF. I will begin with scope and environment validation then perform static and dynamic analysis across both platforms. I will test authentication authorization API endpoints data storage network security and common mobile vulnerabilities. Each finding will include proof of concept severity impact reproduction steps and remediation guidance. I will provide the executive summary and detailed technical report in PDF and editable format followed by a focused retest after fixes. I am free to start immediately and can begin as soon as staging builds credentials and documentation are provided. I respect your development team's suggestions and security requirements and will ensure no test data is retained after the engagement. I am also interested in building a long term security testing relationship. For the initial assessment I can target 5 to 7 days with the retest scheduled after fixes are available. Thanks

@ZainShah22

Hi, I can carry out a thorough white hat penetration test across your live iOS and Android apps following the OWASP Mobile Security Testing Guide. The assessment will cover the client apps, API calls, authentication flows, local data storage, and third party libraries, using static and dynamic analysis with Burp Suite, Frida, and MobSF. You will get a concise executive summary of overall risk, a detailed technical report with reproducible proof of concept steps, severity ratings, and remediation for each finding in both PDF and editable formats, and a retest once fixes are in place to confirm critical issues are closed. No test data retained after the engagement. Estimated timeline: 6 days for the initial test, plus 3 days for the retest after fixes. Ready to start on staging access.

@offensiumvault

Hello, Offensium Vault Private Limited can deliver this end-to-end penetration test for your iOS and Android apps, aligned to OWASP MASVS/MASTG. Approach: We combine static analysis (MobSF, jadx, class-dump) with dynamic testing (Frida, Objection, Burp Suite). We cover API calls, authentication flows, local storage, and third-party libraries. Deliverables: We provide an executive summary and a technical report with reproducible PoC steps, CVSS severity, and remediation guidance (PDF plus editable DOCX). We also retest to confirm critical fixes. Data handling: We sign an NDA, use encrypted storage, and securely delete all test data at close. Timeline: Our initial test takes 10-12 business days, the report follows 3 days later, and the retest takes 3-5 days after fixes. To finalize pricing, how many API endpoints and user roles are in scope, and is the backend included?

@guptakishan805

With my extensive background in developing mobile applications, I understand the intricacies and potential risks that come with it. I possess the skills and knowledge in conducting comprehensive penetration tests to ensure your mobile application is secure from potential breaches. My expertise in Android, iOS Development and API Testing equip me with the necessary tools to conduct thorough and effective penetration tests. I am well-acquainted with industry-standard methodologies like the OWASP Mobile Security Testing Guide and familiar with dynamic and static analysis tools such as Burp Suite, Frida, and MobSF which can greatly contribute to detecting vulnerabilities. My commitment to quality work, clear communication, and attention to detail aligns well with what you are seeking. I am confident I can deliver not only a concise executive summary regarding overall risk but also a comprehensive technical report that,'ll include each vulnerability identified with proof-of-concept steps, along with severity rating and recommended remediation, as per your specifications. Additionally, providing a retest to ensure critical issues were properly closed will be a crucial part of my service. Choosing me means not only getting a highly skilled professional that guarantees actionable results but also someone who values your privacy -no data from the test will be retained once the engagement ends-

@techmadigital

Hi, I can run a thorough white-hat pen test on your live iOS and Android apps. I will test client apps, API calls, authentication flows, local storage, and third-party libraries following the OWASP Mobile Security Testing Guide. I use Burp Suite, Frida, and MobSF for dynamic and static analysis. You will receive an executive summary, a detailed technical report with reproducible proof-of-concept steps, severity ratings, and remediation guidance, plus a retest after fixes. I will not retain any test data once the engagement ends, and reports will be delivered in PDF and editable formats. I have verified full-stack, API, authentication, and deployment experience. Let us lock in the Thanks, Nikhil

@bojans9

Hello Hope you are doing well "Identify And Remediate Mobile App Security Vulnerabilities" - I can perform authorized iOS and Android penetration testing using OWASP methodology, dynamic analysis, and reproducible evidence. I can assess authentication, API authorization, local storage, network communication, third-party components, session handling, and mobile attack surfaces across your staging environments. I will document reproducible findings with severity, proof-of-concept steps, remediation guidance, executive reporting, and a structured retest confirming resolved critical issues. Can you provide the staging builds and backend documentation so I can define the initial testing scope? Looking forward to working with you.

@ihsan191

Hello there, I appreciate the opportunity to apply for the penetration testing of your mobile application. With extensive experience in mobile security assessments, I understand the importance of identifying vulnerabilities before they can be exploited. I specialize in thorough testing methodologies, including the OWASP Mobile Security Testing Guide, ensuring comprehensive coverage of your client apps, API calls, and data storage. My approach will include both dynamic and static analysis using industry-standard tools like Burp Suite and MobSF. I will provide a concise executive summary to highlight overall risks, followed by a detailed technical report outlining each vulnerability, proof-of-concept steps, severity ratings, and actionable remediation strategies. After your development team implements the fixes, I will conduct a retest to confirm that critical issues are resolved. I am ready to begin the initial testing soon and can provide an estimated timeline once we discuss the scope in more detail. I look forward to collaborating with you on this important project. Thank you for your time, Ihsan.

@mikes126

I’d structure the assessment around the OWASP Mobile Security Testing Guide, covering both iOS and Android, with particular attention to authentication/session handling, API authorization, local storage, sensitive data exposure, certificate/TLS handling, reverse engineering protections, and third-party components. The workflow would be: Static analysis of the mobile builds and relevant configuration Dynamic testing of both apps with instrumented traffic and runtime analysis API testing for authentication, authorization, business-logic and input-validation issues Local storage and sensitive-data review Manual verification of findings to eliminate false positives Technical report with reproducible PoCs, severity, affected components and remediation Retest after your fixes and update the findings accordingly I can provide both an executive summary for stakeholders and an editable technical report for the development team, alongside the PDF.

@Mayanks010

Hi, Thanks for sharing your project. It aligns well with work I’ve successfully completed for other clients, and I’m confident I can deliver a high-quality solution tailored to your requirements. Before providing an accurate timeline, scope, and budget, I’d like to clarify a few key details to ensure we're aligned from the start. Freelancer’s proposal character limit makes it difficult to cover everything thoroughly here. If you're available, let's connect via chat. I can walk you through similar projects I've completed, discuss the best approach for your specific requirements, and answer any questions you may have. Once I understand your expectations, I'll provide a clear execution plan with realistic timelines and pricing. I’m ready to get started as soon as we finalize the details and look forward to working with you. Best regards, Mayank Sahu

@michela542

Hello Mate!Greetings , Good afternoon! I am skilled mobile software engineer with skills including API Testing, Usability Testing, Penetration Testing, Testing / QA, Android, Security Auditing, Mobile App Development and iOS Development. Please send a message to discuss more regarding this project. Always happy to hear from you

@juanestebana17

Hey Mate , Good afternoon! I am professional mobile coder with skills including iOS Development, Usability Testing, Security Auditing, Mobile App Development, Android, Penetration Testing, Testing / QA and API Testing. Please send a message to discuss more about this project. Thanks & Regards