DIVA (Damn insecure and vulnerable App) is an intentionally vulnerable Android application designed for educational purposes in the cybersecurity field. The application contains various security flaws and vulnerabilities that are commonly found in mobile applications due to poor coding practices. It serves as a hands-on learning platform for developers, quality assurance professionals, and security practitioners to understand Android application security weaknesses. The tool provides practical experience in identifying and analyzing mobile application vulnerabilities through source code examination and penetration testing techniques. Users can explore different attack vectors and security issues that affect Android applications in real-world scenarios. DIVA includes multiple vulnerability categories that allow learners to practice mobile application security testing methodologies and understand the impact of insecure coding practices on application security.