EVABS : An Open Source Android Application That Is Intentionally Vulnerable

EVABS is an open source Android application that is intentionally vulnerable so as to act as a learning platform for Android application security beginners.

The effort is to introduce beginners with very limited or zero knowledge to some of the major and commonly found real-world based Android application vulnerabilities in a story-based, interactive model.

EVABS follows a level-wise difficulty approach and in each level, the player learns a new concept. This project is still under progress and aims at incorporating as many levels as possible.

Also Read – IPRotate : Extension For Burp Suite Which Uses AWS API Gateway To Rotate Your IP On Every Request

INSTALLATION

  • Download the application file (apk).
  • Install it in an Android device (rooted recommended) or emulator.

REQUIREMENTS

or use ADHRIT (all-in-one tool)

Confused? Read the documentation on setting up the environment.

CHANGE LOG

  • Flag checking module added within EVABS.
  • Alternatively, you can use this link to submit flags from your browser.
  • UI improvements

BUILDING LOCALLY

  • Clone the repository git clone https://github.com/abhi-r3v0/EVABS.git or download the zip.
  • Create a new folder EVABS in your “AndroidStudioProjects“` directory and move the contents to the new directory.
  • Fire up Android Studio, File -> open and select the project.
  • Go to Build -> Generate Signed APK.
  • Create a new signature, if it doesn’t exist. Sign the APK.
  • Install the APK using adb install EVABS.apk

SCREENSHOTS

Download

RELATED ARTICLESMORE FROM AUTHOR