Available at: https://github.com/satishpatnayak/AndroGoat

MASTG-APP-0001: AndroGoat

An open source vulnerable/insecure app using Kotlin. This app has a wide range of vulnerabilities related to certificate pinning, custom URL schemes, Android Network Security Configuration, WebViews, root detection and over 20 other vulnerabilities.