Contact person: Business Client

Phone:Show

Email:Show

Location: Fresno, United States

Budget: Recommended by industry experts

Time to start: As soon as possible

Project description:
"I’m looking for verifiable network-traffic evidence that Waymo’s consumer mobile app authenticates with JSON Web Tokens. What I need from you is the raw traffic logs—preferably a full .har export from a tool such as Charles, Burp, mitmproxy, or a packet capture via tcpdump—showing at least one request that contains the JWT (for example, an Authorization: Bearer eyJ… header or a token embedded in a JSON payload).

The capture must:
• come from the current public Waymo Rider app (Android or iOS)
• include clear timestamps, request/response headers, and bodies where the token appears
• remain unaltered and un-redacted (except for your own personal data, which you may mask)

Deliverables
1. Raw capture file (.har, .pcap, or equivalent)
2. A brief markdown or text note explaining:
– device/OS and app version used
– proxy or capture tool, plus any SSL-pinning bypass method applied
– the exact request(s) where the JWT is visible (timestamp + endpoint)

Once I can open the file and see the token in context, the job is done. If this first phase goes smoothly, I may ask for a similar capture from Uber in a follow-on project." (client-provided description)