I will perform mobile penetration testing

Pakistan

I speak English

VAPT Specialist, Web, Mobile, Network Penetration Testing

I'm Zarlish, a cybersecurity professional specializing in vulnerability assessment, penetration testing, SOC operations, digital forensics, and malware analysis. I use industry tools to identify secur...
About this Gig

Is your mobile app really secure?

I perform professional mobile application penetration tests for Android and iOS apps, following OWASP MASVS and the OWASP Mobile Top 10. You get a clear, actionable report your developers can act on right away.


What I test:

  • Insecure data storage (SharedPreferences, SQLite, Keychain, logs, backups)
  • Weak authentication and session management
  • Insecure communication and SSL/TLS pinning bypass checks
  • Hardcoded secrets, API keys, and credentials
  • Reverse engineering and code tampering resistance
  • Root/jailbreak detection and runtime protections
  • Exported components, deep links, and intent vulnerabilities (Android)
  • Backend API flaws (IDOR, broken access control, injection)


Tools: Burp Suite, Frida, Objection, MobSF, jadx, apktool, Ghidra, Drozer


What you get:

  • Severity-rated findings (CVSS)
  • Step-by-step reproduction and screenshots
  • Remediation guidance for developers
  • Confidential handling under NDA on request

Please note: I only test apps you own or are authorized to test.

My Portfolio