How much does it take to hack a mobile network?
Is electronic government secure
in the era of WikiLeaks and Anonymous?

Is SCADA hacking a Hollywood fiction
or the nowadays reality?
Internet banking: is there any chance to win
over the fraudsters?

Cyber-crimes, cyber-espionage, cyber-war: where do we draw a borderline?

Pages

Thursday, May 31, 2012

Once Again about Remote Banking Security

There is a specific section in the information security forum Positive Hack Days called Ways to Protect Money taking place in the Digital October Center these days, where leading experts from Russia and other countries speak about the issues of the banking security.

For the $natch competition, we have developed our own remote banking system containing common vulnerabilities detected by the experts of Positive Technologies in the course of such systems analysis.


Participants of the $natch contest were to demonstrate their knowledge and skills in exploiting typical vulnerabilities of the remote banking servers. There was a certain amount of money in our “protected” I-bank (conditions were near to the actual).

The hackers were to detect the remote banking vulnerabilities and use them to withdraw money within a limited time during the second stage of the competition. Participants were awarded with the withdrawn amounts. They could cash out their money from an ATM using the following PHDays cards:


And still there’s more to come! We are going to repeat this competition, but this time the teams of Positive Hack Days CTF will work on protection of the remote banking systems (4 hours to search and eliminate vulnerabilities), and then the Internet users will conduct attacks in the course of the Online HackQuest competition.

On May 31 at 6 p.m. the Internet users will penetrate to the CTF network via VPN and start attacking the remote banking systems.
Transferring money from the accounts of the CTF participants by exploiting remote banking vulnerabilities you can affect the final rating of the teams taking part in PHDays CTF 2012.


Please follow the links for the testing versions of the remote banking systems:
Use any of 4 accounts to withdraw money:
  • 91307430600804200281 Anonymous
  • 91307430600372200346 LulzSec
  • 91307430600128500473 Offshore of Potato
  • 91307430600296700514 International Fund for French Fries Welfare
Succeed in the competition as the $natch participants did! Enjoy the battle against the CTF teams and become even more skilled in detecting and exploiting typical vulnerabilities of the remote banking systems!

P. S. It’s worth reminding that the remote banking system has been developed by the experts of Positive Technologies for the purposes of PHDays 2012. It contains typical remote banking vulnerabilities and is not an actual bank system.

65 comments:

  1. Hello,


    These 2 links are dead:

    http://downloads.phdays.com/phdays_ibank_src.zip

    http://downloads.phdays.com/phdays_ibank_vm.zip

    Can you reupload the file please?

    ReplyDelete
  2. Well, customers only attracts when banks offers security as well as privacy with long term beneficial plans.

    ReplyDelete
  3. I install iBank on server. I try to access but It must fill username or password that I don't know

    ReplyDelete
  4. Thanks for providing the source code... Been looking into web service strengthening, so this will help a lot :)

    ReplyDelete
  5. Please provide the username and password.

    ReplyDelete
  6. Very informative article no doubt. Thanks for sharing the info!

    ReplyDelete
  7. root phd2012 is the login

    ReplyDelete
  8. This is a great post; it was very edifying. I look ahead in reading more of your work.generators 2016

    ReplyDelete
  9. Sorry ALl.Got it .. When i clicked below link.

    Please follow the links for the testing versions of the remote banking systems:
    only application source codes with the testing database
    virtual machine with an installed remote banking system

    ReplyDelete
  10. %253Cscript%253Ealert("testingxss :P")%253Cscript%253E

    ReplyDelete
  11. What I really need to read one more time is https://nerdymates.com/blog/family-essay. I am going to write family essay soon so it will be definitely useful.

    ReplyDelete
  12. Thanks for interesting post. I can also suggest taking a look at this online company. On clients demands, best writers can make marketing content, a generic article, or a SEO article.

    ReplyDelete
  13. Wow! It looks very tasty! When you buy essays from custom writing company , you are getting work that meets the highest standards in the industry. Whether you buy term papers for high school or buy research papers for a post-graduate thesis, you can be assured of professional quality writing from our custom writing service. We are so confident in the level of service that we provide, we have guarantees covering all aspects of our services.

    ReplyDelete
  14. "Insightful" is the perfect word to describe this wonderful writing of yours. The artistic blend of this subject with your tone of writing made this a great read. Much love 😘.
    How to bottom

    ReplyDelete
  15. Once you request for our Best Custom Essay Services our writers use a guide in creating your assignments. Each paper is crafted from scratch to guarantee plagiarism free work. Whether you have a topic in mind or require help in choosing the most suitable topic, Buy Pre Written Essays can help get your paper completed.

    ReplyDelete
  16. You are sharing the very informative and great post. It is effortless and easy to understand for me and a great addition for https://essaysworld.net/superb-essay-writing-service

    ReplyDelete
  17. Get the Digital Marketing and Website Designing Services by OGEN Infosystem in Delhi, India. Like- SEO Services, PPC Services and also creative Website Design for your website.
    Web Design Company in Delhi

    ReplyDelete
  18. Fucked up by someone

    ReplyDelete
  19. Put more information in like this blog, visit OGEN Infosystem (P) Ltd for responsive website design based on device view for your website by experienced website designers and also get SEO Services.
    SEO Service in Delhi

    ReplyDelete
  20. Hi! If you happen to look for a writing help then it's time to apply to the essay writing service for help. For example, you can find there analysis paper example and many other things.

    ReplyDelete
  21. Do you require Annotated Bibliography Powerpoint Presentation from a credible and trusted writing company which guarantees high -quality articles for the client? It can be challenging to acquire secure and confidential Quality Research Papers from a writing company.

    ReplyDelete
  22. Thanks for sharing such a great blog... I am impressed with you taking time to post a nice info.
    iPad Application Development
    Hybrid App Development
    Web Development Services

    ReplyDelete
  23. very nice graphics, your creativity is very impressive. it is very good information for make Creativity
    PHP Development

    Laravel Development Company
    CodeIgniter Development Company
    ASP.Net Development Company

    ReplyDelete
  24. I am glad that I saw this post. It is informative blog for us and we need this type of blog thanks for share this blog, Keep posting such instructional blogs and I am looking forward for your future posts.
    Cyber Security Projects for Final Year

    JavaScript Training in Chennai

    Project Centers in Chennai

    JavaScript Training in Chennai

    ReplyDelete
  25. Thank you so much for this amazing information sharing with us. Visit Appslure WebSolution for the best mobile app development company in Gurgaon
    Mobile app development company in gurgaon

    ReplyDelete
  26. Your very own commitment to getting the message throughout came to be rather powerful and have consistently enabled employees just like me to arrive at their desired goals.

    Dotnet Training in Chennai
    Matlab Training in Chennai
    Embedded Training in Chennai
    SAS Training in Chennai
    Powerbi Training in Chennai
    R Programming Training in Chennai

    ReplyDelete
  27. Great post i must say and thanks for the information.I appreciate your post and look forward to more.
    For more information visit on
    vanmiumakeup
    vanmiu

    ReplyDelete
  28. Indian Celebrities Hot Images, Hot Photos, Hot Pics just visit this website given below.

    Hot Pics

    ReplyDelete
  29. sekarang ini banyak sekali pria yang membutuhkan viagra asli usa cod di lippo cikarang sebagai salah satu obat untuk meningkatkan gairah bercinta bersama pasangan. lihat selengkapnya kini banyak wanita yang merasa senang semenjak suaminya mengonsumsi viagra asli usa 100 mg cod di karawang karena staminanya jadi lebih kuat ketika berhubungan intim baca disini . nama viagra asli usa 100mg cod di semarang semakin populer semenjak para pria telah sukses saat berhubungan badan dengan istrinya info selengkapnya . sejak saat itu kedua pasangan bisa merasakan kepuasan dalam melakukan hubungan badan ketika diranjang dan bisa mencapai klimaks yang sangat memuaskan hanya dengan meminum 1 tablet viagra asli usa 100 mg cod di bandung .

    ReplyDelete
  30. Skip Hire Near Me offers cheap skip hire prices, low skip cost. We offer every size of skip for rubbish removal, waste clearance or grab hire. skiphirenear.uk will help you to choose the best skip according to your requirements. It will save you time and money as well.

    ReplyDelete
  31. WEBSITE DESIGNING COMPANY IN DELHI – Egainz.com
    We are a website designing company in Delhi help you in creating responsive websites with expert team of website designers and developers with strict timelines and affordable prices in Delhi. We have delivered more then 450 ++ Projects in India. Our team help companies, startups, individuals to design and redesigning responsive websites in India, Delhi. We have a in house team of expert web design and developers based in India, Delhi.

    ReplyDelete
  32. Provide the Assignment Help online support service. Expert writers of US assignment who will help you by providing good high-quality essay help and other assignment assistance services. I Need Help With My Homework

    ReplyDelete
  33. Millions of people around the world complete their daily task with the help of HP devices. If you come across any technical issue with HP device then don’t worry, get HP Support Assistance from deft technicians. They have years of experience and easily resolve your HP device issues.

    ReplyDelete
  34. Virus Solution Provider - Online World Wide Data Recovery
    Data Recovery Customer Care +91 999-081-5450 .We at Virusolutionprovider, understand the vital importance of your data and its significance in your business. We help you retrieve and recover your lost data due to any technical glitch or human error. Our programs are specially designed to scan whole memory hierarchy for lost data files and to retrieve the lost data back to the initial storage location. Our aim is to retrieve all of your data without any data or information loss. We have a skilled team with years of experience in the field of data recovery. We are committed to provide effective solutions related to data loss to our customers, with minimum response time and at optimal price.
    Go to the Official Website
    https://www.virusolutionprovider.com
    Call our Support Number = +91 (999) 081-5450 (WhatsAap call or Direct Call)

    ReplyDelete
  35. Singapore tax calculator - If you want to start your business in Singapore and want to know about the calculating tax in Singapore visit 3ecpa.com.sg, the best accounting firm to hire the corporate secretarial services to their clients.

    ReplyDelete
  36. Singapore business for sale - Easy Buy Sell Business is the best online platform to buy and sell your business online in Singapore

    ReplyDelete
  37. Company registry search in Hong Kong visit 3ecpa.com.hk, they assist you in setting up business in Hong Kong

    ReplyDelete
  38. Wrriting in shorthand method is a great idea for students because it is tha method with which students may save their time when they are taking notes of their lectures.

    ReplyDelete
  39. Nice info thanks for sharing! Providing Us With This Great Knowledge Mot Check History

    ReplyDelete
  40. Electronic media is making progress day by day and one-day remote control will be finished and the new methods will generate.
    coursework writing services

    ReplyDelete
  41. Amazing Blog, Very Helpful, Providing Us With This Great Knowledge Check Mot History Online

    ReplyDelete
  42. High quality iphone case & Covers by independent artists and designers from around the world.

    ReplyDelete
  43. Your style is very unique in comparison to other people I've read stuff from. Thanks for posting when you have the opportunity, education Guess I'll just book mark this web site.

    ReplyDelete
  44. I have purchased new land for building a modernized residential home. I have a map to design my home beautifully and construct it strongly, so I can live in this home for many and many years. I have also the designs for a car basement and roof. I want to use steel building solutions for my residential house. Now, I don’t have the right option to choose appropriately. There are many Pre Engineered Building Manufacturers
    available on the Internet, but I have a different choice for the best company. I look for affordable rates but believe in quality. I am weighing all the options for the budget and ease of the project. So, anyone can suggest the name of the best steel building company.

    ReplyDelete
  45. I think this is an informative post and knowledgeable. I would like to thank you for the efforts you have made in writing this article
    packers and movers in delhi

    ReplyDelete
  46. Currently, this attractive residential project offers both residential and commercial plots. Available sizes for residential plots are 5 Marla, 6 Marla, 8 Marla and 10 Marla. In addition, you can invest in 1 Kanal and 2 Kanal residential plots. Meanwhile, commercial plots for sale are 3 Marla, 5 Marla, and 8 Marla in size.


    Khanial Homes

    ReplyDelete
  47. It’s hard to come by experienced people about this subject, but you seem like you know what you’re talking about! Thanks.
    Java Training in Bangalore
    Python Training In Bangalore

    ReplyDelete