InjuredAndroid Versions Save

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

v1.0.12

2 years ago

This release includes the missing x86_64 library for the Flutter module.

v1.0.11

2 years ago

Added flag eighteen!

This flag is all about File Providers. The intended solution is meant to be difficult, you'll need to leverage another Android application to access internal directories.

v1.0.10

3 years ago
  • Added Android Lollipop support
  • Added a GUI home button on the flag solved activity
  • Cleaned up code and resolved some bugs

v1.0.9

3 years ago
  • Fixed database sync issue with SQLite flag!
  • Added two new flags!

v1.0.6.DEFCON

3 years ago

Added all my examples from my Android Application Exploitation talk.

v1.0.6

3 years ago

Adding flag 15! This assembly based flag is designed to be an intro to Shared Object reverse engineering as well as XOR reversing.

v1.0.5

3 years ago

Updates

  • Added more narnia binary architectures for different devices (Thank you for helping debug this issue theart42)
  • Added Encrypted SharedPreferences so the booleans are not easily modified for the flags
  • Cleaned up ctf exercise code
  • Converted more ctf exercises to Kotlin for increased efficiency and readability

RCE ctf exercise notes

The RCE ctf exercise is easier to complete with the debug apk because Flutter on release builds prevents installation of the production build on emulators. The debug build is 64.90 mb because Flutter basically downloads an entire web stack.

v1.0.4

3 years ago
  • Added a Flutter module for Flutter/Dart based vulnerability scenarios
  • Updated logo
  • Many theme/graphical changes for the Flutter module
  • Added Flag 14 a Flutter based XSS exercise

v1.0.3

4 years ago

This release adds a new flag! Have fun! :)

v1.0.2

4 years ago
  • Saves flag completion states
  • Settings option added to clear flag states
  • Dark Mode
  • Multiple bug fixes
  • XML style alignment fixes