vuln-bank

취약한 은행 애플리케이션 🏦 웹, API 및 LLM의 애플리케이션 보안 테스트, 안전한 코드 리뷰, CI/CD 파이프라인에 보안 구현을 연습하기 위한 의도적으로 취약하게 만든 웹 애플리케이션입니다. ⚠️ 경고: 이 애플리케이션은 의도적으로 취약하게 제작되었으며, 격리된 환경에서 교육 목적으로만 사용해야 합니다. 개요 이 프로젝트는 여러 보안 취약점이 내장된 간단한 은행 애플리케이션입니다. 보안 엔지니어, 개발자, 인턴, QA 분석가 및 DevSecOps 실무자가 다음 사항을 학습할 수 있도록 설계되었습니다: 일반적인 웹...

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment Objective: Demonstrate the exploitation of the Log4Shell vulnerability CVE-2021-44228 within a simulated banking application environment. Scope: 1: Setup a vulnerable banking application using Apache Log4j. 2:Craft a payload to exploit...

Banking-Application-Vulnerable

No d...

CVE-2023-54163: Improper Neutralization of Special Elements used in an SQL Command

NLB mKlik Macedonia 3.3.12 contains a SQL injection vulnerability in international transfer parameters that allows attackers to manipulate database queries. Attackers can inject arbitrary SQL code through unsanitized input to potentially disclose sensitive information from the mobile banking...

Exploit for CVE-2025-55182

React2Shell Vulnerable Banking Application Lab Deliberately v...

EUVD-2014-7460

Malware in sbrugna...

EUVD-2017-18532

Malware in sbrugna...

CVE-2025-9097

A vulnerability was found in Euro Information CIC banque et compte en ligne App 12.56.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.cicprod.bad. The manipulation leads to improper export of android application...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment O...

Damn-Vulnerable-Bank - Vulnerable Banking Application For Android

Damn Vulnerable Bank Android Application aims to provide an interface for everyone to get a detailed understanding with internals and security aspects of android application. How to Use Application Clone the repository and run the Backend Server as per instructions in the link. We have released t...

First Security Bank Sleepy Eye Mobile for iOS Information Disclosure Vulnerability

First Security Bank Sleepy Eye Mobile for iOS is an iOS-based mobile banking application from First Security Bank in the United States. The program features quick access to manage bank accounts, manage balances, pay bills and send money. A security vulnerability exists in version 3.0.0 of First...

CVE-2017-10084

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Report Generator. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low...

Barwa Banking Application - BSD license, Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Barwa Banking Application published at the 'play' market has multiple vulnerabilities...

CVE-2017-9562

The Freedom First freedom-1st-credit-union-mobile-banking/id1085229458 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9571

The Citizens Community Bank TN ccb-mobile-banking/id610030469 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Bakai Bank Mobile Banking - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Bakai Bank Mobile Banking published at the 'play' market has multiple vulnerabilities...

All Bank Balance Checker - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application All Bank Balance Checker published at the 'play' market has multiple vulnerabilities...

U by BBT for iOS Security Bypass Vulnerability

U by BB&T for iOS is a suite of iOS-based banking apps. A security vulnerability exists in U by BB&T for iOS 1.5.4 and earlier versions, which originates from the program failing to properly validate the SSL server's X.509 certificate. The vulnerability can be exploited to conduct a...

Meine Bank - Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Meine Bank published at the 'play' market has multiple vulnerabilities...

CVE-2012-5810: Improper Certificate Validation

The Chase mobile banking application for Android does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, relat...