https://cpeoples.github.io/dvma/index.htmlA single-codebase, intentionally vulnerable Flutter app for mobile security training. Maps to OWASP Mobile Top 10 (2024), MASVS/MASTG, and the OWASP Top 10 for LLM/GenAI (2025).HugoenThu, 24 Sep 2026 16:36:55 +0000https://cpeoples.github.io/dvma/getting-started/index.htmlThu, 24 Sep 2026 16:36:55 +0000https://cpeoples.github.io/dvma/getting-started/index.htmlInstall Flutter, build DVMA, and install it on an Android or iOS device.https://cpeoples.github.io/dvma/architecture/index.htmlThu, 24 Sep 2026 16:36:55 +0000https://cpeoples.github.io/dvma/architecture/index.htmlHow DVMA's Flutter UI, native Android host, and companion attacker app work together to produce real, device-extractable artifacts.https://cpeoples.github.io/dvma/dashboard/index.htmlThu, 24 Sep 2026 16:36:55 +0000https://cpeoples.github.io/dvma/dashboard/index.htmlDVMA coverage matrix: vulnerability counts by OWASP MASVS category and difficulty across Android and iOS.https://cpeoples.github.io/dvma/vulnerabilities/index.htmlThu, 24 Sep 2026 16:36:55 +0000https://cpeoples.github.io/dvma/vulnerabilities/index.htmlEvery DVMA vulnerability by OWASP MASVS category, mapped to the OWASP Mobile Top 10, MASVS/MASTG, CWE, and the LLM/Agentic Top 10.https://cpeoples.github.io/dvma/device-access/index.htmlThu, 24 Sep 2026 16:36:55 +0000https://cpeoples.github.io/dvma/device-access/index.htmlRoot a Pixel (Magisk) or jailbreak an iOS device (Dopamine), then recover the real on-device artifacts DVMA writes.https://cpeoples.github.io/dvma/manual-testing/index.htmlThu, 24 Sep 2026 16:36:55 +0000https://cpeoples.github.io/dvma/manual-testing/index.htmlExternal-tool verification steps (MITM, Frida, drozer, static analysis) the in-app test suite can't drive, split per platform.