DIVA (Damn insecure and vulnerable App) is an App intentionally designed to be insecure. The Android version of Diva aims to teach developers, QA, and security professionals about flaws present in apps due to poor coding practices. It is a learning tool for Android penetration testers and security professionals, providing insight into app vulnerabilities and source code.
FEATURES
SIMILAR TOOLS
A comprehensive educational resource that provides structured guidance on penetration testing methodology, tools, and techniques organized around the penetration testing attack chain.
Korean cyber-security challenge platform for exploiting and defending web application vulnerabilities.
Collection of cybersecurity conference videos from GreHack 2018 covering various cutting-edge topics.
A condensed field guide for cyber security incident responders, covering incident response processes, attacker tactics, and practical techniques for handling incidents.
A practical security handbook for .NET developers covering essential security controls, cryptographic functions, and secure coding practices.
Comprehensive tutorial series on ARM Assembly covering various topics.
PINNED

Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.