Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities.
Go to file
Achim D. Brucker 0d7b584a5a Limit functionality of the plugin to hasExtra and getExtra. 2015-05-13 20:33:56 +02:00
plugins/DVHMA-WebIntent Limit functionality of the plugin to hasExtra and getExtra. 2015-05-13 20:33:56 +02:00
.gitignore Initial commit 2015-05-13 11:43:05 +02:00
LICENSE Initial commit 2015-05-13 11:43:05 +02:00
README.md Added link to ZertApps homepage. 2015-05-13 12:42:51 +02:00

README.md

DVHMA

Damn Vulnerable Hybrid Mobile App (DVHMA) is an hybrid mobile app (for Android) that intentionally contains vulnerabilities. Its purpose is to enable security professionals to test their tools and techniques legally, help developers better understand the common pitfalls in developing hybrid mobile apps securely.

Motivation and Scope

This app is developed to study pitfalls in developing hybrid apps, e.g., using Apache Cordova or SAP Kapsel, securely. Currently, the main focus is to develop a deeper understanding of injection vulnerabilities that exploit the JavaScript to Java bridge.

Team Members

This application is developed as part of the project ZertApps (Certified Security for Mobile Applications). ZertApps (http://www.zertapps.de) is a collaborative research project funded by the German Ministry for Research and Education. The core developers of DVHMA are:

License

This project is under the Apache 2.0 License.