TitanShield Test Project

This Android project contains intentional security vulnerabilities for testing TitanShield's SAST capabilities.

Expected Vulnerabilities

The TitanShield scanner should detect:

1. Hardcoded Secrets: API keys, passwords, AWS credentials, encryption keys
2. Weak Cryptography: DES encryption, MD5 hashing
3. Dangerous Permissions: Location, contacts, SMS, camera without justification
4. Insecure Network: Cleartext traffic enabled
5. WebView Issues: JavaScript enabled with file access
6. SQL Injection: Unsafe query construction
7. Insecure Random: Math.random() for security tokens
8. Logging Sensitive Data: Credentials in logs
9. Exported Components: Without proper permission checks
10. Private Keys: Hardcoded RSA keys

Testing

Push to this repository to trigger TitanShield GitHub integration.

Expected: 13+ vulnerabilities detected by TitanShield SAST.