Your trusted financial partner since 1923 · Secure · Reliable · Private
Checking, savings, and money market accounts
Grow your wealth with our portfolio services
Competitive rates on home loans and refinancing
256-bit encryption protects your data
| Product | Rate | APY |
|---|---|---|
| Savings Account | 4.25% | 4.33% |
| 12-Month CD | 5.10% | 5.23% |
| 30-Year Mortgage | 6.85% | 6.91% |
| Auto Loan | 7.20% | 7.45% |
Access your accounts securely
Forgot password? Reset here
DB_QUERY: SELECT * FROM users WHERE username='INPUT' AND password='INPUT'
🔍 CTF Hint: This login form is vulnerable to SQL injection.
Try classic bypass payloads. Check the page source for the query structure.
| Date | Description | Amount | Balance |
|---|
Download your monthly statement by account ID.
Search customer accounts by name or account number.
💡 Hint: This search is passed directly to the database query.
🔑 CSRF token: CSRF_TOKEN_1234
The transfer form uses a static CSRF token that never changes. This means an attacker can craft a malicious page that auto-submits a transfer on behalf of a logged-in user.
Vulnerability: CSRF (Cross-Site Request Forgery)
Token: CSRF_TOKEN_1234
⚠ User input is rendered directly without sanitization (CTF environment only)
Access bank documents and statements.
Enter a file path to retrieve documents. The system reads from /var/www/bank/documents/
💡 Hint: What happens if you use ../ sequences in the path?
⚠ This page should not be accessible to regular users. Broken Access Control vulnerability demonstrated.
| ID | Name | SSN | Balance | Account # | Password Hash | |
|---|---|---|---|---|---|---|
| 1001 | Margaret Thompson | XXX-XX-4821 | mthompson@email.com | $48,291.44 | CHK-48219034 | 5f4dcc3b5aa765d61d8327deb882cf99 |
| 1002 | Robert Chen | XXX-XX-7723 | rchen@email.com | $124,800.00 | SAV-77231100 | e10adc3949ba59abbe56e057f20f883e |
| 1003 | Diana Reyes | XXX-XX-3391 | dreyes@fnb.com | $9,402.77 | CHK-33912200 | 25d55ad283aa400af464c76d713c07ad |
| 9999 | admin | XXX-XX-0000 | admin@fnb.internal | $999,999.99 | ADM-00000001 | 21232f297a57a5a743894a0e4a801fc3 |
Recover your account access
💡 CTF: Try common answers or brute-force the security question. Username: admin