We have designed an app which requires the highest level of security. Whatever it takes you have to find out if you can access the contents sent and received or stored in the app or database of the app.
It is an app for mobile conversations. You need to network test and intercept the data between two users and group conversations. To find out if the conversations are properly encrypted with each time a different key.
You also need to try to hack the database of the conversations in the app.
We do not want just a OWASP result - we need you to try to intercept the encrypted or not encrypted conversations.
Part one: budget $250.
When this project goes well. With proper results, we will continue with the project part two.
First project is part one.
Part two: You need to reverse engineering, pentest (penetration testing), security testing, database testing, network testing, anything to see if you can break this app.
We require a detailed report of everything you have tested, and how you have tested.
We require the detailed report of vulnerabilities and things that are properly secured.
We want to know everything you have tested. Plus the vulnerabilities you have found, and the things that are good secured listed. Part two budget: $750.