Hacking Corporate Banking for Fun and Profit
Reconnaissance and vulnerability discovery across enterprise banking software used by major financial institutions worldwide.
Summary
Targeting Widely Deployed Banking Software
Security research initiated during a financial sector bug bounty engagement uncovered third-party corporate banking software deployed across dozens of major banks worldwide.
Reconnaissance and Attack Surface Mapping
Analyzing client marketing materials, client-side application bundles, and undocumented API endpoints revealed extensive hidden attack surfaces and administrative interfaces.
Exploitation and Vulnerability Discovery
Detailed findings demonstrate how SQL injection vulnerabilities and access control bypasses within the platform allowed unauthorized extraction of sensitive financial data and privilege escalation.
Related talks
Creator Stage·26 min
Jasmin Landry
Chronicles serendipitous bug bounty discoveries, from unexpected blind XSS triggers to misdirected sensitive internal data distributions.
Creator Stage·51 min
Justin 'Rhynorater' Gardner
Recounts high-severity bug bounty discoveries from live hacking events, detailing complex chains from SQL injection to remote code execution.
War Stories·34 min
Ben Sadeghipour · Corben Leo
Ben Sadeghipour (NahamSec) and Corben Leo share war stories from high-impact bug bounty engagements across prisons, major tech firms, and online casinos.