@hpAndro1337 Android Application Security

CTF Style Android Security Challenges ctf.hpandro.raviramesh.info

Android AppSec (Kotlin) app will help you to practice for Android Security points. We do it for the right reasons - to help developers make their apps more secure. The best way to verify that your app follows secure mobile development best practices is to perform security assessments of the app, which can include automated mobile app security testing, fuzzing, manual penetration testing, and more. This application represents some of the knowledge we share with the infosec community. We are trying to build a vulnerable application based on OWASP Mobile Security Testing Guide.

We (@hpAndro and @_RaviRamesh) spend a lot of time attacking android app hacking, breaking encryption, finding bussiness logic flaws, penetration testing, and looking for sensitive data stored insecurely.

We try harder to build vulnerable application for you..

In this application we are covering below points:

1. HTTP Traffic
2. HTTP Traffic
3. HTTPS Traffic
4. Public Key Pinning
5. Certificate Pinning Bypass (network_security_config.xml) [Coming Soon…]
6. Certificate Pinning Bypass (okhttp) [Coming Soon…]
7. Certificate Pinning Bypass (Cert check) [Coming Soon…]
8. Certificate Pinning Bypass (Cert Hash match) [Coming Soon…]
9. Non-HTTP Traffic
10. TCP Traffic
11. UDP Traffic
12. WebSocket Traffic
13. Web Socket (WS)
14. Web Socket Secure (WSS)
15. Root Detection
16. Root Management Apps
17. Potentially Dangerous Apps [Available in Master App]
18. Root Cloaking Apps
19. Test Keys
20. Dangerous Props [Available in Master App]
21. BusyBox Binary
22. Su Binary [Available in Master App]
23. Su Exists
24. RW System [Available in Master App]
25. SafetyNet [Coming Soon…]
26. Using running processes [Coming Soon…]
27. Emulator detection
28. Virtual Phone Number [Available in Master App]
29. Device IDs [Available in Master App]
30. Hardware Specifications [Available in Master App]
31. QEmu Detection [Available in Master App]
32. File Based Checking [Available in Master App]
33. IP Based Checking [Available in Master App]
34. Package Name [Available in Master App]
35. Debug Flag [Available in Master App]
36. Network Operator Name [Available in Master App]
37. Anti-Debugging detection
38. PMS Hook Detection [Coming Soon…]
39. Checking TracerPid [Coming Soon…]
40. Using Fork and ptrace [Coming Soon…]
41. Frida Detection [Coming Soon…]
42. SafetyNet [Coming Soon…]
43. Debuggable Flag [Coming Soon…]
44. isDebugger Connected [Available in Master App]
45. Timer Checks [Coming Soon…]
46. JDWP-Related Data Structures [Coming Soon…]
47. Insecure Data Storage
48. SQLite Databases (Unencrypted)
49. SQLite Databases (Encrypted) [Available in Master App]
50. Realm Databases (Unencrypted) [Coming Soon…]
51. Realm Databases (Encrypted) [Coming Soon…]
52. Firebase Real-time Databases [Coming Soon…]
53. Shared Preferences
54. Internal Storage
55. External Storage
56. KeyStore [Available in Master App]
57. KeyChain [Coming Soon…]
58. Keyboard Cache [Coming Soon…]
59. User Interface [Coming Soon…]
60. App Backup [Coming Soon…]
61. Screenshots [Coming Soon…]
62. Memory [Available in Master App]
63. User Dictionary Cache [Coming Soon…]
64. Clipboard [Available in Master App]
65. Activity data
66. Logs
67. Informational Logs
68. Error Logs
69. Warnings Logs
70. Debug Logs
71. Verbose Logs
72. WTF Logs
73. Content Providers
    1. SQL Injection
    2. File System Expose [Available in Master App]
74. Encryption
    1. Message Authentication Codes [Coming Soon…]
    2. Message Digest [Coming Soon…]
    3. Signatures [Coming Soon…]
    4. Custom Implementations [Coming Soon…]
    5. Caesar Cipher
    6. Weak Key Generation [Coming Soon…]
    7. Weak Random Number [Coming Soon…]
    8. Weaker Padding [Coming Soon…]
75. Symmetric Encryption
    1. DES
    2. 3DES
    3. RC4
    4. Blowfish
    5. AES
    6. Predictable Initialization Vector
76. Asymmetric Encryption
    1. RSA
77. Hashing
    1. MD4
    2. MD5
    3. SHA1
78. Authentication
    1. Biometric [Coming Soon…]
    2. Confirm Credentials [Coming Soon…]
    3. 2FA - OTP Leakage
    4. 2FA - Response Manipulation [Available in Master App]
    5. 2FA - Status Code Manipulation [Available in Master App]
    6. 2FA - OTP Brute-Force [Available in Master App]
    7. 2FA - OTP Brute-Force 2 [Available in Master App]
    8. 2FA - Integrity Validation [Available in Master App]
    9. Application lock [Coming Soon…]
79. Binary Protection
    1. RPATH [Available in Master App]
    2. Hardcoded Secret [Available in Master App]
    3. Native Function Call [Available in Master App]
    4. Packers [Coming Soon…]
    5. Obfuscator [Coming Soon…]
80. Device ID
    1. SSAID/ANDROID_ID
    2. Device Wi-Fi MAC
    3. GPS Location
    4. IMEI/ESN
    5. MEID [Coming Soon…]
    6. IMSI [Available in Master App]
81. Web Application
    1. HTML5 Controls
    2. Bruteforce
    3. Login Bypass - Cookies Manipulation [Available in Master App]
    4. Encoding - Hashing [Available in Master App]
    5. JavaScript - Info leak [Available in Master App]
    6. Server Fingerprint
    7. Client Side Validation Bypass
    8. User Password Enumeration
    9. OTP Bruteforce
    10. JWT Misconfiguration
    11. Guessable Session ID
    12. REST API HTTP Methods
    13. SSRF
    14. XXE
    15. Unrestricted File Upload
    16. LFI [Coming Soon…]
    17. RFI [Available in Master App]
    18. Deserialization [Coming Soon…]
    19. XPATH Injection [Available in Master App]
    20. Metafiles - Info Leakage [Available in Master App]
    21. RIA Cross Domain Policy [Available in Master App]
    22. Default Credentials [Available in Master App]
    23. OS Command Injection [Coming Soon…]
    24. S3 bucket misconfiguration [Available in Master App]
    25. Path Traversal [Coming Soon…]
    26. Captcha Bypass [Coming Soon…]
    27. IP whitelisting Bypass [Coming Soon…]
    28. SSTI [Available in Master App]
    29. Review comment and Metadata [Available in Master App]
    30. Code Injection [Coming Soon…]
    31. Old Backup Files [Available in Master App]
    32. Insecure Direct Object Reference [Available in Master App]
    33. JSON to XXE (Blind) [Available in Master App]
82. Miscellaneous
    1. Deeplink [Coming Soon…]
    2. QR Code
    3. Backdoor1
    4. Backdoor2
    5. Backdoor3
    6. Backdoor4
    7. Backdoor5
    8. Backdoor6 [Available in Master App]
    9. Backdoor7 [Available in Master App]

It will be great if you can support and share your thoughts with us to improve this application.