Introduction

InsecureShop is an Android application that is designed to be intentionally vulnerable. The aim of creating this app is to teach developers and security professionals about the vulnerabilities that are present in modern Android applications. This also serves as a platform to test your Android pentesting skills.

This space is only intended to point out the vulnerabilities implemented in the InsecureShop app and the vulnerable code used. This space won't provide you with complete solutions for all the vulnerabilities that are implemented in the InsecureShop app.

The InsecureShop project was released as part of the SourceZeroCon 2021.

You can view the slides here:

Last updated