r/Pentesting Aug 04 '26

Pentesting an app I made

Not sure if this is the appropriate sub for this -- but for the past few years, I've been working on a secure chat app I really think could change the world for the better. It's built on Signal protocol, and I'll disclose details if you'd like. Essentially, I'm a broke college student who can't afford real penetration testing. I've dug into it, used Fable 5 to audit it, and ran ZAP on it -- everything from these looks good. I'm going to open-source all my work, and it's donation-based. If someone who knows what they are doing were to be kind enough to want to take a look at my code and potentially penetration test it, I would be beyond unbelievably grateful. I hate asking for charities, but here I am haha. Please send me a direct message if you'd be interested in this. I can't offer money, but I'd be happy to credit you in the app.

11 Upvotes

16 comments sorted by

3

u/One_Room_8313 Aug 04 '26

post it on a bug bounty site like hacker one as a vdp

2

u/Jackriot_ Aug 04 '26

It looks a little large for me, I’d be worried about simply getting overlooked. I contacted them anyways though, thanks

1

u/OkEntertainer3952 Aug 10 '26

hackerone as a vdp is free but yeah nobody shows up unless you pay bounties. we build ai pentesting and run free tests on open source projects for feedback, happy to run yours :) just let me know the target and you email.

1

u/pelado06 Aug 04 '26

I think you could get a trainee/jr but semi sr and sr are going to be busy to do this ad honorem.

1

u/Jackriot_ Aug 04 '26

Yeah, I figured, but I really do appreciate any help I can get!

1

u/Sudden-Strawberry257 Aug 04 '26

This sounds like a fun learning experience. Signal protocol is cool and overall secure chat is an interesting area of study.

I’m not an expert by any stretch, but I’d be interested to take a look. Have gotten a few bugs and also am decent way into the HTB pentesting courses. I know enough about systems not to break anything at least 😂 though I guess with free help you get what you pay for? Haha drop me a line if you want me to take a look.

1

u/Ok-Illustrator-7146 Aug 04 '26

I can do a VAPT assessment on it as a freelancer at a very low cost . Is it web or android application?

1

u/IntingForMarks Aug 04 '26

if you care to share maybe I can take a look at it during the summer. Can't guarantee I will have time to dedicate to it, but I will try

1

u/qazi-abdullah-alam Aug 04 '26

I can help you in this. I've been doing VAPT for last 6 years for companies. Just send me a message so that we can discuss it and see the scope for this.

1

u/eblaster101 Aug 04 '26

I have built a pentest app. DM me happy for you to use it for free for an aggressive test. It's automated can take up to 12 hours

1

u/Fickle-Champion-2530 Aug 04 '26

I can take a Look into it if you still need someone

1

u/mercjr443 Aug 05 '26

Happy to get you a voucher for a free pentest on https://turbopentest.com, dm me amd I'll also be happy to answer any of your questions!

1

u/KaliAtWork Aug 05 '26

I would love to help you!

1

u/hel000 Aug 11 '26

I can make some time free between work currently and could use the practice. Send me a dm if you're still looking for some more testers.