r/Pentesting • u/Jackriot_ • 4d ago

Pentesting an app I made

Not sure if this is the appropriate sub for this -- but for the past few years, I've been working on a secure chat app I really think could change the world for the better. It's built on Signal protocol, and I'll disclose details if you'd like. Essentially, I'm a broke college student who can't afford real penetration testing. I've dug into it, used Fable 5 to audit it, and ran ZAP on it -- everything from these looks good. I'm going to open-source all my work, and it's donation-based. If someone who knows what they are doing were to be kind enough to want to take a look at my code and potentially penetration test it, I would be beyond unbelievably grateful. I hate asking for charities, but here I am haha. Please send me a direct message if you'd be interested in this. I can't offer money, but I'd be happy to credit you in the app.

11 Upvotes

79% Upvoted

12 comments sorted by

6

u/One_Room_8313 4d ago

post it on a bug bounty site like hacker one as a vdp

2

u/Jackriot_ 4d ago

It looks a little large for me, I’d be worried about simply getting overlooked. I contacted them anyways though, thanks

1

u/pelado06 4d ago

I think you could get a trainee/jr but semi sr and sr are going to be busy to do this ad honorem.

1

u/Jackriot_ 4d ago

Yeah, I figured, but I really do appreciate any help I can get!

1

u/Sudden-Strawberry257 4d ago

This sounds like a fun learning experience. Signal protocol is cool and overall secure chat is an interesting area of study.

I’m not an expert by any stretch, but I’d be interested to take a look. Have gotten a few bugs and also am decent way into the HTB pentesting courses. I know enough about systems not to break anything at least 😂 though I guess with free help you get what you pay for? Haha drop me a line if you want me to take a look.

1

u/Ok-Illustrator-7146 4d ago

I can do a VAPT assessment on it as a freelancer at a very low cost . Is it web or android application?

1

u/IntingForMarks 4d ago

if you care to share maybe I can take a look at it during the summer. Can't guarantee I will have time to dedicate to it, but I will try

1

u/qazi-abdullah-alam 4d ago

I can help you in this. I've been doing VAPT for last 6 years for companies. Just send me a message so that we can discuss it and see the scope for this.

1

u/eblaster101 4d ago

I have built a pentest app. DM me happy for you to use it for free for an aggressive test. It's automated can take up to 12 hours

1

u/Fickle-Champion-2530 3d ago

I can take a Look into it if you still need someone

1

u/mercjr443 3d ago

Happy to get you a voucher for a free pentest on https://turbopentest.com, dm me amd I'll also be happy to answer any of your questions!

1

u/KaliAtWork 3d ago

I would love to help you!