This vulnerable Android application is made for security enthusiasts and developers to learn Android insecurities, with a back-end server component written in Python2. It includes a variety of vulnerabilities such as flawed broadcast receivers, weak authorization mechanisms, insecure storage, and more.
FEATURES
SIMILAR TOOLS
A community website for API security news, vulnerabilities, and best practices
A tool to find and search for registered CVEs, creating a local CVE database for offline use.
A vulnerability and exposure management platform that unifies security tool data, automates workflows, and provides risk-based prioritization for enterprise vulnerability management programs.
OCaml bindings to the YARA scanning engine for integrating YARA scanning capabilities into OCaml projects
A virtual machine with numerous security vulnerabilities for testing exploits with Metasploit.
Crt.sh is a website that allows users to search for SSL/TLS certificates of a targeted domain, providing transparency into certificate logs.
A comprehensive online resource for application security knowledge
PINNED

Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.