nvisium-jack-mannino/owasp-goatdroid-project

*This project is no longer maintained* OWASP GoatDroid is a fully functional and self-contained training environment for educating developers and testers on Android security. GoatDroid requires minimal dependencies and is ideal for both Android beginners as well as more advanced users. The project currently includes two applications: FourGoats, a location-based social network, and Herd Financial, a mobile banking application. There are also several feature that greatly simplify usage within a training environment or for absolute beginners who want a good introduction to working with the Android platform. Download the built version here: https://github.com/jackMannino/OWASP-GoatDroid-Project/downloads

owasp-goatdroid-project's Issues

Log into the FourGoats application with username: joegoat password: goatdroid.

In Goatdroid Gui under Getting started point 5 says that Log into the FourGoats application with username: joegoat password: goatdroid.
But tools->utilities->database browser -> fourgoats -> users
and execute select * from users

it shows only 5 users:
Handbitter555
goat4life
joehorns1
androidguy93
goatdroid

there is no user called joegoat.

Unfortunately, FourGoat has stopped working

Hello,

1. FourGoats apps crashed when open in emulator in Eclipse. If using Android Studio, did not have those problem. I don't know how to fix it since I cant open the apps at all in Eclipse.
2. For your information, I'm using Mac. Does it need to run on Windows platform?

why I can not find the help document and the lessons folder and top10 folder is empty?

why I can not find the help document and the lessons folder and top10 folder is empty?

Herd Financial android dependencies

I am trying to build the Herd Financial application within the Android Development Tool (ADT built on Eclipse). I can't seem to find the right api version to get it to compile correctly. I thought it was android-16, but I still get errors in compilation.

I am doing this to tryout a vulnerability scanner tool which is supposed to support Android applications.

Thanks

goatdroid-gui.jar not found

Hi All,

I am trying to install GoatDroid but i do not found the "goatdroid-gui.jar" referenced on GettingStarted page.

Could you please tell me how can i start the application or where i can find that file?

Thanks in advance,

Emanuele

No README in the master branch

Could you please put the README file into the master branch? There are addition informaition with the download link to self-contained training environment. I think it will be very useful for everyone, who wants to try out the GoatDroid apps. The README is only available in other branches like "web".

Use Spring Security for auth.

Fix the ghetto crap currently in place with a proper implementation.

Fix ugly map marshaling into JSON

Get rid of the map objects and use lists of models instead...makes parsing and working with the client-side JSON easier on the eyes (and less nested parsing junk).

herd financial is not responding

hi all,
while registering for herd financial of goatdroid it's showing host cannot be null. where to mention the host in this application. please help me out here this is very urgent.

How do you use this?

Are there any setup steps? I dont see the android.jar file (the guy that listens on port 12000). Only the main menu seems to work, everything under it is just a white screen. Thanks.

Unfortunately, Herd Financial has stopped

Hi there,

Is there problem with Herd Financial application server? I received the following error after clicking the app: Unfortunately, Herd Financial has stopped

Pls help to advise. Thanks

App opens with 'Hello world'

I am a software tester, with an Android developer we tried to launch the app using IntelliJ and Android Studios but the only module we could specify was 'app', which was resulting in having the app launched displaying 'hello world' which is the default app screen. We haven't found any file to launch the 2 proper applications, are we missing something?

Where is the Android source + build instructions?

Just starting to take a look at GoatDroid but I only see the GUI source, not the Android application source. Is that accessible in GIT somewhere?

Code Syntax Highlighting

Code syntax formatting and highlighting is broken within the GoatDroid Web UI. This is a JavaScript issue.

Change Click events to Tap

Change click events to bind tap event.

Turn on SSL in new web app

Add and distribute a self-signed cert.

Issue in logging and registering

Hi All,

Need Help to set up Goatdroid environment.
I tried to install new version of goatdroid.

in destination info i provided my system IP address and HTTPS port: port mentioned in goatdroid gui and in goatdroid GUI configuration i provided Host: my ip address, and proxy port 8888.

i have tried changing the port: to 8080, 8888, 9888 but nothing worked out.

While Registering i got black box without any message. and some times it could not connect with remote server.

please let me know how to proceed.

Regards,
Manish

Make databases persistent.

Currently, the DB is held in memory and blown away when the server web app is killed. Make it persistent so that it sticks around (ie- move it back out of the classpath)

Getting Started

Unless I'm missing something, the getting started section needs to be updated as I am having issues finding the goatdroid.jar

Lessons missing

Missing Lessons...

After installing I found there are no lessons included. Am I missing something?