A deliberately vulnerable mobile banking application designed for practicing mobile security testing. Features common vulnerabilities found in real-world applications, making it an ideal platform for security professionals, developers, and enthusiasts to learn mobile penetration testing..
☆107Nov 25, 2025Updated 11 months ago
Alternatives and similar repositories for vuln-bank-mobile
Users that are interested in vuln-bank-mobile are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bash scripts to automate the burpsuite's certificate configuration and proxying of an Android device for penetration test.☆22May 26, 2025Updated last year
- Using the Vulnerable Bank App project to teach Engineers how to automate security testing of vulnerable applications in the CI/CD Pipelin…☆13Apr 14, 2026Updated 6 months ago
- A deliberately vulnerable banking application designed for practicing Security Testing of Web App, APIs, AI integrated App and secure cod…☆993Updated this week
- Very Vulnerable Management API (VVMA) is a deliberately insecure RESTful API built with Node.js for educational and testing purposes. It …☆70Jun 5, 2025Updated last year
- A simple web app to get the latest EPSS data for a CVE ID☆14Dec 14, 2025Updated 10 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Collection of all the resources published by Payatu.☆11May 14, 2026Updated 5 months ago
- An interactive security testing platform that demonstrates real vulnerabilities in Large Language Models.☆11Aug 30, 2026Updated 2 months ago
- Claude Code skill + 18 AI agents for Android & iOS mobile app security audits. OWASP MASVS/MASTG-aligned, with adversarial exploitation c…☆21Oct 8, 2026Updated 3 weeks ago
- Advanced JWT decoding & cracking toolkit with a user-friendly UI for security testing☆52Oct 10, 2026Updated 3 weeks ago
- This repository is dedicated to documenting and sharing bug bounty reports. The goal is to help security researchers and developers: Le…☆15Jun 22, 2026Updated 4 months ago
- HackList: Your go-to AI-powered guide to hands-on cybersecurity learning!☆24Jul 6, 2025Updated last year
- "Terrible Thick Client" is a vulnerable application developed in C# .NET framework.☆20Jul 9, 2023Updated 3 years ago
- LSPosed module for disabling SSL certificate pinning on Android. Covers Java-layer pinning (OkHttp, TrustManager, Conscrypt, WebView, Cor…☆45Aug 20, 2026Updated 2 months ago
- A powerful Burp Suite extension that imports Postman collections☆33Aug 1, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆50Aug 17, 2026Updated 2 months ago
- A collection of Awesome Frida Scripts for MAPT☆21Jan 7, 2023Updated 3 years ago
- Provide Ranges for others to use and modify using Ludus automation☆12Oct 25, 2026Updated last week
- An advanced Out-of-Band and In-Band SSRF fuzzing scanner with dynamic request tracking.☆39Jun 18, 2026Updated 4 months ago
- frida-server binary patcher that defeats string/port/thread anti-Frida detection☆21Aug 11, 2026Updated 2 months ago
- 🦋 Glasswing — See through Flutter's TLS. Bypass BoringSSL SSL pinning on Android: static libflutter.so patching + Frida runtime hooks. N…☆23Oct 18, 2026Updated 2 weeks ago
- Windows / Linux Local Privilege Escalation Workshop☆11Jan 15, 2019Updated 7 years ago
- Damn Vulnerable API☆97Sep 22, 2025Updated last year
- ☆12Aug 16, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Extra plugins for SSTImap☆18Oct 17, 2026Updated 2 weeks ago
- ☆23Mar 7, 2024Updated 2 years ago
- pereprava is a minimal http/https redirector and reverse proxy for red team ops.☆17Oct 16, 2025Updated last year
- Blast credentials across all 10 NetExec protocols in parallel — live hits, auto-skip timeouts, clean summaries. Built for fast iterative …☆17Mar 10, 2026Updated 7 months ago
- Android interception tool for component communication and attack-surface mapping☆132Oct 23, 2026Updated 2 weeks ago
- Find credentials and secret with 170+ rules covering across source code, Web URL, and CI/CD, verifies them against vendor APIs, and gene…☆124Sep 16, 2026Updated last month
- List of robotics companies/organizations in Africa☆14Jun 19, 2025Updated last year
- USRLINKS v1.0 - The Ultimate Username Reconnaissance Tool☆24Oct 6, 2025Updated last year
- Since the SecOps Group has offered free certification to Certified Appsec Practitioner I will be creating notes here. I will be working o…☆80May 31, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆77May 5, 2025Updated last year
- Short and simple vulnerable PHP web application that naïve scanners found to be perfectly safe☆14Dec 4, 2015Updated 10 years ago
- Jenkins pre-auth RCE exploit. More info at https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266 https://blog.orange.tw/2019/02/…☆10Mar 15, 2019Updated 7 years ago
- Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. This provides an interface to assess your android…☆766Dec 13, 2023Updated 2 years ago
- This repo offers comprehensive information, necessary tools, and instructional videos for beginners in Android penetration testing, provi…☆26Jun 12, 2023Updated 3 years ago
- HOCXSS (Cross Site Scripting)☆12May 7, 2020Updated 6 years ago
- HOCig- Automatic HOC Information Gathering Tool V 1.2☆11May 4, 2021Updated 5 years ago