Open-source alternatives to DVHMA

Drozer is an Android security assessment framework and vulnerability scanner. It serves as a security auditor for Android devices and their installed software, providing a specialized environment for analyzing inter-process communication mechanisms and auditing application endpoints. The framework focuses on Android inter-process communication analysis, allowing for the interrogation of system services and application components. It enables the execution of specialized security modules and custom scripts to identify vulnerabilities and test the security of runtime interfaces. The system prov

GOAD is an Ansible-based automation tool and infrastructure orchestrator used to deploy pre-configured networks of vulnerable Windows virtual machines. It serves as a security training environment for practicing Active Directory penetration testing, privilege escalation, and lateral movement across various cloud platforms and local virtualization hypervisors. The project distinguishes itself through a multi-provider infrastructure model and a system of infrastructure recipes that simulate intentional security misconfigurations. It supports the deployment of varied attack scenarios, including

Oversecured Vulnerable Android App

Web and mobile application security training platform

The Damn Vulnerable Router Firmware Project

Powered by 8ksec.io

Metasploitable3 is an automated virtual machine provisioner designed to build and deploy operating system images with intentional security weaknesses. It functions as a penetration testing lab by creating vulnerable virtual machine targets used for security training, exploit development, and the validation of security tools. The system uses configuration scripts to inject vulnerabilities into Windows and Linux environments. This includes the deployment of insecure applications and services, such as web servers and databases, and the application of misconfigured system permissions to simulate

Damn Vulnerable Thick Client App

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis