I will do android app security testing and vulnerability assessment
About this Gig
I am a Mobile Application Security Analyst specializing in Android and iOS
penetration testing, with hands-on experience through bug bounty research
and a current internship in mobile app security.
WHAT I OFFER:
Static Application Security Testing (SAST) using MobSF, JADX, APKTool
Dynamic Application Security Testing (DAST) with Frida and Burp Suite
Manifest and exported component analysis (Activities, Services,
Receivers, Providers)
OWASP MASVS-aligned security assessment
Insecure data storage, weak cryptography, and network security review
Detailed vulnerability report with severity rating and remediation steps
WHO THIS IS FOR:
- App developers who want a security review before launch
- Startups needing a mobile security audit for compliance/investors
- Companies wanting an independent second opinion on their Android/iOS app
MY APPROACH:
1. I analyze your APK/IPA using industry-standard tools
2. I identify vulnerabilities (OWASP Top 10 Mobile risks)
3. I test exported components, data storage, and network traffic
4. I deliver a clear, actionable report not just a scanner dump
I do NOT perform destructive testing or touch production data without
explicit permission.
Device:
Mobile
FAQ
Do you need the app's source code?
No, I primarily perform black-box/grey-box testing on the compiled APK/IPA. Source code access can improve depth but isn't required.
Will you test on production/live app?
I recommend testing on a staging/test environment with test accounts. I never perform destructive actions without explicit written permission.
What format is the final report?
A detailed PDF report with vulnerability descriptions, severity ratings (CVSS-aligned), proof-of-concept, and remediation guidance.
Can you also test iOS apps?
Yes, I test both Android and iOS applications.
