vuln-bank

Vulnerable Bank Application 🏦 Web、API、LLMを対象としたアプリケーションセキュリティテスト、セキュアコードレビュー、CI/CDパイプラインへのセキュリティ実装を練習するための、意図的に脆弱なWebアプリケーションです。 ⚠️ 警告：このアプリケーションは意図的に脆弱性を含んでおり、教育目的でのみ隔離された環境で使用してください。 概要...

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment

銀行環境におけるCVE-2021-44228-Log4Shellの悪用 目的: シミュレートされた銀行アプリケーション環境内で、Log4Shellの脆弱性（CVE-2021-44228）の悪用を実証します。 範囲: 1: Apache Log4jを使用した、脆弱性のある銀行アプリケーションをセットアップする。 2:脆弱性を悪用してリモートコード実行を達成するペイロードを作成する。 3:データ窃取や水平移動などの侵害後のテクニックを実証する。 4:パッチ適用やネットワーク監視を含む、検出および緩和策を実装して文書化する。 5:使用したツール（例：JNDI Exploit Kit、Burp...

Banking-Application-Vulnerable

No d...

Exploit for CVE-2025-55182

React2Shell Vulnerable Banking Application Lab Deliberately v...

EUVD-2014-7460

Malware in sbrugna...

EUVD-2017-18532

Malware in sbrugna...

CVE-2025-9097

A vulnerability was found in Euro Information CIC banque et compte en ligne App 12.56.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.cicprod.bad. The manipulation leads to improper export of android application...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment O...

Damn-Vulnerable-Bank - Vulnerable Banking Application For Android

Damn Vulnerable Bank Android Application aims to provide an interface for everyone to get a detailed understanding with internals and security aspects of android application. How to Use Application Clone the repository and run the Backend Server as per instructions in the link. We have released t...

First Security Bank Sleepy Eye Mobile for iOS Information Disclosure Vulnerability

First Security Bank Sleepy Eye Mobile for iOS is an iOS-based mobile banking application from First Security Bank in the United States. The program features quick access to manage bank accounts, manage balances, pay bills and send money. A security vulnerability exists in version 3.0.0 of First...

CVE-2017-10084

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Report Generator. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0 and 12.3.0. Easily exploitable vulnerability allows low...

Barwa Banking Application - BSD license, Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Barwa Banking Application published at the 'play' market has multiple vulnerabilities...

CVE-2017-9562

The Freedom First freedom-1st-credit-union-mobile-banking/id1085229458 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-9571

The Citizens Community Bank TN ccb-mobile-banking/id610030469 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Bakai Bank Mobile Banking - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Bakai Bank Mobile Banking published at the 'play' market has multiple vulnerabilities...

All Bank Balance Checker - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application All Bank Balance Checker published at the 'play' market has multiple vulnerabilities...

U by BBT for iOS Security Bypass Vulnerability

U by BB&T for iOS is a suite of iOS-based banking apps. A security vulnerability exists in U by BB&T for iOS 1.5.4 and earlier versions, which originates from the program failing to properly validate the SSL server's X.509 certificate. The vulnerability can be exploited to conduct a...

Meine Bank - Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Meine Bank published at the 'play' market has multiple vulnerabilities...