Trusted by over 1.6 million members since 2014 — why not join them?
Snailsoft
∞ and beyond!
Staff Member
Moderator
SB Mod Squad ⭐
✔ Approved Releaser
Active User
Member for 2 years
Androgoat is intentionally vulnerable application which help to understand and perform the demonstration of real world android app pentesting scenarios. It’s build in kotlin.
It is well documented on the internet.
AndroGoat is purposely developed open source vulnerable/insecure app using Kotlin. Security Testers/Professionals/Enthusiasts, Developers...etc. can use this application to understand and defend the vulnerabilities in Android platform. This is the first vulnerable app developed using Kotlin.If you are looking to learn Android Application Security Testing then AndroGoat is a perfect solution.
I strongly believe this AndroGoat will help many people to learn Android Application Security Testing.
Happy learning
Vulnerabilities covered in this app:
Root Detection
Emulator Detection
Insecure Data Storage – Shared Prefs - 1
Insecure Data Storage - Shared Prefs - 2
Insecure Data Storage - SQLite
Insecure Data Storage – Temp Files
Insecure Data Storage – SD Card
Keyboard Cache
Insecure Logging
Input Validations – XSS
Input Validations – SQLi
Input Validations – WebView
Unprotected Android Components – Activity
Unprotected Android Components –Service
Unprotected Android Components – Broadcast Receivers
Unprotected Android Components – Content Providers (Coming Soon)
Hard coding issues
Network intercepting – H T T P
Network intercepting – H T T P S
Network intercepting – Certificate Pinning
Misconfigured Network_Security_Config.xml
Android Debuggable
Android allowBackup
Custom URL Scheme
Broken Cryptography
QR Code Scanning (Coming Soon)
Fingerprint Authentication (Coming Soon)
No: you can play and install this app without root permissions.
No: you can use this app even without any Internet Connection.
The official app is several years old.
I have updated the gradle code, API, and added several updates from forked versions and recompiled the whole package.
• App not installing/saying not compatible and you're running Android 14? Then you may need to install and use VPhoneOS on your phone by clicking here or, if have a computer, visit this page from PC and click here. This should help you. If not, read this: how to install mod apk files on Android 14 or newer.
Before reading the installation instructions below, if you need help about how to use our website, please watch a simple video tutorial we created, about How to Download & Install apk files from sbenny.com by clicking here.
Download the desired APK file below and tap on it to install it on your device.
• App not installing/saying not compatible and you're running Android 14? Then you need to install VPhoneOS on your phone by clicking here or, if have a computer, visit this page from PC and click here. Also, make sure you turned off "Play Protect" from the Google Play Store app, as it prevents installing mods. This should help you. If not, read this: how to install mod apk files on Android 14 or newer.
If you need help about how to use our website, please watch this simple video tutorial below about How to Download & Install apk files from sbenny.com.
Code:https://github.com/satishpatnayak/AndroGoat
