Introduction

About Damn Vulnerable Bank

Damn Vulnerable Bank is designed to be an intentionally vulnerable android application. Numerous resources are available on the internet to get started with android application security. This application provides an interface to assess the security knowledge you gained over time. There are multiple vulnerabilities in the application and we documented all of them in this guide. Take your own sweet time to explore the application and detect all the vulnerabilities.

Outline

• Authors
• Tools
• Installation
  • Bypass
    • GPU detection
    • Root Detection
    • Frida detection with Ghidra
• Footprinting
  • Decrypting response
  • Recreating crypto functions
• Exploits
  • REST API vulnerabilities
  • Sensitive Information Disclosure
  • Exported activities
  • Webview via deeplink
• Contribute
• Additional Resources