Reverse engineering an Android app / with a Firebase RESTful API (pen-testing)

I need someone to reverse engineering an apk file from the playstore. You are only provided the APKS file, NOT THE SOURCE CODE!

The app is a bundle of split apks, thus the APK file is actually an apks file comprised of base.apk and multiple split apks.

There are two parts to this project.

1. You have to enable debugging on the app so that the app can be debugged in Android studios from the apktool decompiled data. This means you must be able to put breakpoints, monitor observers, inject code into the methods, such as log statements, and be able to understand the general flow of the app from this.

1 is not as important as 2. #2 needs to be done no matter if you are able to do #1 or not.
You need to by any means necessary reverse engineering the APK or APP and create an understanding of the REST api. Including what calls are made, how the token is received, and how you can replicate the API from Postman or another app. I believe the app uses Firebase to communicate over SSL. I dont care if you inspect the contents of the APK file or inspect the SSL traffic.

I need to know the exact API calls and the JSON data that the app sends. I need to know how to create a manual GET request on Postman and how to login as well. I need to know how I can replicate the entire app REST api on postman.

Part #3

The app has two important parts. 1st is that there is a main observer that receives updates pushed from the server in real time. It then displays the data pushed and you have the ability to accept this data otherwise it will disappear from the queue. I need you to put the APK in debug mode and read the contents that is sent from the server to the Observer. If this is not possible, #2 is sufficient, that is replicating the API with the ability to create the Obsever in a separate app.

Pay is set at $1000.
I am not joking, if you are not qualified or arent sure if you can complete this please dont reply. Pay is immediate upon video confirmation of what I request.
About the recuiter
Member since Sep 12, 2017
Yash Arora
from New York, United States

---

---

Looking for help? Checkout our video tutorial
How to search and apply for jobs

How to apply? Do you have more questions about the Job?
See frequently asked questions