How p-saiprasanth/android_testing_research works
This repository is a benchmark dataset, not the implemented analysis framework described in the README. It contains four vulnerable Android applications, each with an APK, manifest, and Java/Smali archives. The README documents a proposed MobSF-to-LLM assessment and evaluation workflow, but no automation, AI-agent, report, or results directories appear in the tree; those stages are shown as documented capabilities, not inspected implementations.
Main entry points: AndroGoat AndroGoat · DIVA DIVA · InjuredAndroid InjuredAndroid · InsecureBankv2 InsecureBankv2
Components 27
Benchmark apps
- AndroGoat
AndroGoat - APK
AndroGoat/AndroGoat.apk - Manifest
AndroGoat/AndroidManifest.xml - Java archive
AndroGoat/Java_Code.zip - Smali archive
AndroGoat/Smali_Code.zip - DIVA
DIVA - APK
DIVA/DIVA.apk - Manifest
DIVA/AndroidManifest.xml - Java archive
DIVA/Java_Code.zip - Smali archive
DIVA/Smali_Code.zip - InjuredAndroid
InjuredAndroid - APK
InjuredAndroid/InjuredAndroid.apk - Manifest
InjuredAndroid/AndroidManifest.xml - Java archive
InjuredAndroid/Java_Code.zip - Smali archive
InjuredAndroid/Smali_Code.zip - InsecureBankv2
InsecureBankv2 - APK
InsecureBankv2/InsecureBankv2.apk - Manifest
InsecureBankv2/AndroidManifest.xml - Java archive
InsecureBankv2/Java_Code.zip - Smali archive
InsecureBankv2/Smali_Code.zip
Documented analysis
- MobSF SAST
- Static findings
- LLM security agent
- OWASP classification
- Assessment report
- Comparative evaluation
Other components
- Researcher
Connections 42
- Researcher → AndroGoat: selects benchmark
- Researcher → DIVA: selects benchmark
- Researcher → InjuredAndroid: selects benchmark
- Researcher → InsecureBankv2: selects benchmark
- AndroGoat → APK: includes
- AndroGoat → Manifest: includes
- AndroGoat → Java archive: includes
- AndroGoat → Smali archive: includes
- DIVA → APK: includes
- DIVA → Manifest: includes
- DIVA → Java archive: includes
- DIVA → Smali archive: includes
- InjuredAndroid → APK: includes
- InjuredAndroid → Manifest: includes
- InjuredAndroid → Java archive: includes
- InjuredAndroid → Smali archive: includes
- InsecureBankv2 → APK: includes
- InsecureBankv2 → Manifest: includes
- InsecureBankv2 → Java archive: includes
- InsecureBankv2 → Smali archive: includes
- APK → MobSF SAST: scanned by
- APK → MobSF SAST: scanned by
- APK → MobSF SAST: scanned by
- APK → MobSF SAST: scanned by
- MobSF SAST → Static findings: generates
- Manifest → LLM security agent: context for
- Java archive → LLM security agent: context for
- Smali archive → LLM security agent: context for
- Manifest → LLM security agent: context for
- Java archive → LLM security agent: context for
- Smali archive → LLM security agent: context for
- Manifest → LLM security agent: context for
- Java archive → LLM security agent: context for
- Smali archive → LLM security agent: context for
- Manifest → LLM security agent: context for
- Java archive → LLM security agent: context for
- Smali archive → LLM security agent: context for
- LLM security agent → OWASP classification: classifies findings
- LLM security agent → Assessment report: generates
- Static findings → Comparative evaluation: compared against
- Assessment report → Comparative evaluation: compared against
- Researcher → Comparative evaluation: validates results