Damn Vulnerable Hybrid Mobile App or DVHMA is a hybrid mobile app for Android that deliberately contains vulnerabilities. Its motivation is to empower security experts to test their tools and techniques legitimately, enable developers to better comprehend the normal pitfalls in developing hybrid mobile apps securely.
This application is created to examine pitfalls in developing hybrid apps, e.g., utilizing Apache Cordova or SAP Kapsel, safely. Right now, the fundamental concentration is to develop a deeper understanding of injection vulnerabilities that exploit the JavaScript to Java bridge.
Smart Devices: Find Necessary Hi-Tech Product Easy on 4Prototypes.com.
We assume that the
Moreover, we assume a basic familiarity with the build system of Apache Cordova.
export ANDROID_HOME=<Android SDK Installation Directory>
export PATH=$ANDROID_HOME/tools:$PATH
export PATH=$ANDROID_HOME/platform-tools:$PATH
cd DVHMA-Featherweight
cordova plugin add ../plugins/DVHMA-Storage
cordova plugin add ../plugins/DVHMA-WebIntent
cordova platform add android
cordova compile android
cordova run android
The development of this application started as part of the project ZertApps. ZertApps was a collaborative research project funded by the German Ministry for Research and Education. It is now developed and maintained by the Software Assurance & Security Research Team at The University of Sheffield, UK.
The core developers of DVHMA are:
garak checks if an LLM can be made to fail in a way we don't…
Vermilion is a simple and lightweight CLI tool designed for rapid collection, and optional exfiltration…
ADCFFS is a PowerShell script that can be used to exploit the AD CS container…
Tartufo will, by default, scan the entire history of a git repository for any text…
Loco is strongly inspired by Rails. If you know Rails and Rust, you'll feel at…
A data hoarder’s dream come true: bundle any web page into a single HTML file.…