You can also download the debug version of the app from.The Source can be downloaded from github.Please send an email to info with subject “DIVA Contribution”. Yes, you can help by sending us the details of vulnerabilities that we can implement in future versions of Diva. I have also included few vulnerabilities in native code, which makes it more interesting from the perspective of covering both Java and C vulnerabilities. It covers common vulnerabilities in Android apps ranging from insecure storage, input validation to access control issues. Please ping me if you know of a good vulnerability tat can be included in Diva. I am sure I have missed out on some vulnerabilities. I tried to put as much vulnerabilities as possible in a short period of time. With that said, it is an excellent learning tool for aspiring Android penetration testers and security professionals as it gives an insight into app vulnerabilities including the source code.

Diva gamifies secure development learning. SO, I created DIVA for our Android developer training. The Android security training for developers becomes slightly boring with lot of theory and not much hands-on. The idea originated, from a developer’s perspective. No offense to anyone, but I was bored with the name DV* and decided to name it more fancy :) Who can use Diva? If you are reading this, you want to either learn App pentesting or secure coding and I sincerely hope that DIVA solves your purpose. The aim of the App is to teach developers/QA/security professionals, flaws that are generally present in the Apps due poor or insecure coding practices.

We thought it would be a nice way to start the year by contributing something to the security community. We are releasing the Android version of Diva. DIVA (Damn insecure and vulnerable App) is an App intentionally designed to be insecure.

Free download diver diva