Guide: https://rewanthtammana.com/damn-vulnerable-bank/

Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. All the details are documented in the guide, here.

• https://cfp.nonamecon.org/nnc2021/talk/WCKLTN/

• TBD

• Sign up
• Login
• My profile interface
• Change password
• Settings interface to update backend URL
• Add fingerprint check before transferring/viewing funds
• Add pin check before transferring/viewing funds
• View balance
• Transfer money
  • Via manual entry
  • Via QR scan
• Add beneficiary
• Delete beneficiary
• View beneficiary
• View transactions history
• Download transactions history

To keep things crisp and interesting, we hidden this section. Do not toggle this button if you want a fun and challenging experience. Try to explore the application, find all the possible vulnerabilities and then cross check your findings with this list.

• Add profile and change-password routes
• Create different secrets for admin and other users
• Add dynamic generation of secrets to verify JWT tokens
• Introduce bug in jwt verification
• Find a way to store database and mount it while using docker
• Dockerize environment

Damn Vulnerable Bank was created by

Read more, here.