# Vuldroid

Vuldroid is a Mobile App Security product. It runs on-premises. Pricing is free.

A deliberately vulnerable Android application containing multiple security flaws designed for educational purposes and security training.

Checked October 2026.

## What is Vuldroid?

Vuldroid is a deliberately vulnerable Android application designed for security education and training purposes. The application contains multiple intentionally implemented security vulnerabilities that demonstrate common Android security issues.

The application covers eight different vulnerability categories:
- Code execution through malicious applications
- File theft via WebView using XHR requests
- File theft using FileProvider through Intents
- Password reset token and magic login link theft
- WebView XSS attacks via exported activities
- WebView XSS attacks via DeepLink intents
- Inter-application communication sniffing
- User email extraction via broadcast receivers

Users can install the APK file and explore the application to identify and understand how these vulnerabilities manifest in Android code. The tool serves as a practical learning environment for security researchers, developers, and students to study Android security weaknesses in a controlled setting.

The application includes Firebase integration for authentication features, and users can configure their own Firebase project by replacing the included google-services.json file with their own project configuration.

Tags: Education, XSS, Android Security, Vulnerable Applications

## Where it fits in your security program (NIST CSF 2.0)

- [Protect](https://cybersectools.com/guides/building-protect-program-small-team): helps you prevent attacks and keep data safe.

## Quick facts

- Category: [Application Security](https://cybersectools.com/categories/application-security) · [Mobile App Security](https://cybersectools.com/categories/mobile-app-security)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 66
- Website: github.com

## Where it ranks

Vuldroid is not a pick on the current [Best Mobile App Security Solutions for Business](https://cybersectools.com/shortlists/best-mobile-app-security-solutions).

## Vuldroid FAQ

### What is Vuldroid?

Vuldroid is a product in the Mobile App Security category. It covers Education, XSS and Android Security.

### What is the pricing for Vuldroid?

Vuldroid is free. Download and setup instructions are at https://github.com/jaiswalakshansh/Vuldroid/.

### What are alternatives to Vuldroid?

Alternatives to Vuldroid listed on CybersecTools:

1. [Ostorlab Mobile Security](https://cybersectools.com/tools/ostorlab-mobile-security) - Mobile security testing platform for Android and iOS apps with SAST and DAST (Commercial)
2. [ImmuniWeb® Neuron Mobile](https://cybersectools.com/tools/immuniwebr-neuron-mobile) - AI-enhanced mobile app security scanner for Android & iOS with SAST/DAST (Commercial)
3. [DerScanner Mobile Application Security Testing (MAST)](https://cybersectools.com/tools/derscanner-mobile-application-security-testing-mast) - Mobile app security testing platform for Android and iOS apps (Commercial)
4. [Edgescan Mobile Application Security Testing (MAST)](https://cybersectools.com/tools/edgescan-mobile-application-security-testing-mast) - Mobile app security testing combining vuln assessment, pentesting & forensics (Commercial)
5. [Guardsquare DexGuard](https://cybersectools.com/tools/guardsquare-dexguard) - Android app protection tool with obfuscation, encryption, and RASP (Commercial)

Compare all Vuldroid alternatives at [https://cybersectools.com/alternatives/vuldroid](https://cybersectools.com/alternatives/vuldroid)

### What deployment and organization size does Vuldroid fit?

Vuldroid is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare Vuldroid with similar solutions

- [Vuldroid vs Ostorlab Mobile Security](https://cybersectools.com/compare/ostorlab-mobile-security-vs-vuldroid)
- [Vuldroid vs ImmuniWeb® Neuron Mobile](https://cybersectools.com/compare/immuniwebr-neuron-mobile-vs-vuldroid)
- [Vuldroid vs DerScanner Mobile Application Security Testing (MAST)](https://cybersectools.com/compare/derscanner-mobile-application-security-testing-mast-vs-vuldroid)

All alternatives to Vuldroid: [/alternatives/vuldroid](https://cybersectools.com/alternatives/vuldroid)

---

Source: https://cybersectools.com/tools/vuldroid

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Vuldroid: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md