About

We are looking for an experienced reverse engineer or cryptographer to help us understand and extract pricing data from an ecommerce Android app. The data is public and accessible through the app without requiring a login or registration, so we are not asking for anything that is unethical or illegal - we just need access to the data programmatically rather than from an Android screen. Please note, this is NOT an easy task. We are NOT looking for a "screen scraper" (OCR, etc), basic mitmproxy/HTTP Tool Kit, etc. This project has had multiple experts work on it and they have not succeeded, so please only apply if you feel you have a very low-level understanding of how to reverse engineer Android apps. One strategy we've identified the app uses to not allow for access to its public data is through the generation of tokens. A cryptographer may be able to understand this algorithm to generate working tokens. You are able to use the app with a VPN and interact with it to see the data and screens, so the challenge here is to decrypt the traffic (Frida, HTTPToolkit, reverse engineering) safely and ethically (you are not allowed to register or login). More details may follow in the DM. This is a long-term project if you desire it (support and maintenance of the solution for long-term). Applicants should: - Not use AI to respond to this job post - Describe past experiences of such complex tasks