Intentionally Vulnerable Apps

A curated list of the best intentionally vulnerable apps for Android bug bounty learning and inspiration.

Oversecured Vulnerable Android App (OVAA)

A vulnerable app showing modern security bugs in Android apps

Damn Vulnerable Bank

Vulnerable Banking Application for Android

InsecureShop

Intentionally Vulnerable Android Application

Vuldroid

Vulnerable Android Application made with security issues

InjuredAndroid

A vulnerable Android application with ctf examples based on bug bounty findings

Android-InsecureBankv2

Vulnerable Android application for learning about Android insecurities

Damn Insecure and Vulnerable app (DIVA)

Damn Insecure and vulnerable App for Android

OWASP-GoatDroid-Project

Fully functional training environment for Android security

Sieve

Password Manager app showcasing common vulnerabilities

Mobile Hacking Lab

Mobile Hacking Lab

Security Compass Android Labs

Security Compass Android Labs

Security Compass iPhone Labs

Security Compass iPhone Labs

OWASP iGoat (Android)

OWASP iGoat (Android)