An intentionally insecure Android app designed to teach secure coding and penetration testing through hands-on vulnerability challenges.
DIVA Android is a deliberately insecure Android application designed to teach developers, QA engineers, and security professionals about common vulnerabilities in mobile apps. It provides hands-on challenges covering insecure storage, input validation, access control, and native code flaws. The app serves as an educational tool to understand and practice identifying security weaknesses in real-world scenarios.
Android app developers learning secure coding practices, penetration testers specializing in mobile security, security professionals seeking practical training, and students studying application security.
DIVA offers a gamified, practical approach to learning Android security with real vulnerabilities and source code access, making it more engaging than theoretical training. It covers both Java and native code vulnerabilities, providing comprehensive coverage of common mobile app security issues.
DIVA Android - Damn Insecure and vulnerable App for Android
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
The app gamifies secure development learning, making it engaging and practical, as highlighted in the README's philosophy of moving beyond theoretical training.
Covers 13 current challenges including insecure storage, input validation, access control, and native code flaws, providing a wide range of real-world examples.
Offers source code access for both Java and C vulnerabilities, allowing users to inspect actual implementations and understand the impact of poor coding practices.
Encourages contributions for new vulnerabilities via email, ensuring the tool can evolve with community input, as mentioned in the README's contribution section.
Does not provide hints or solutions for challenges, which can frustrate learners who get stuck without external resources or community support.
Requires manual compilation of C libraries using make commands, adding complexity for users unfamiliar with command-line tools or Android NDK, as noted in the compilation instructions.
The README is basic and lacks detailed troubleshooting or advanced usage guides, relying on user feedback via email for bug reports.