Skip to content

This is a vulnerable web application I developed for my Database Security class at Boston University. It contains possible IDOR and session hijacking attacks in a pseudo-realistic banking web app. The application is built using the LAMP stack.

License

Notifications You must be signed in to change notification settings

abelreqma/BankofAbel

Repository files navigation

Overview

Bank of Abel is a deliberately vulnerable online banking web application developed for educational and research purposes. The application is backed by a MySQL database and includes user roles, balance displays, and sensitive data fields to demonstrate the potential impact of broken authentication and access control issues. Again, this application is intentionally insecure and should never be deployed in a production environment.

Installation

  1. Clone the Repository
git clone https://github.com/abelreqma/BankofAbel
  1. Set up the MySQL Database
sudo systemctl start [mysql, mysqld]
mysql -u <user> -p < bank_of_abel.sql
  1. Place Project Files in Web Server Directory; i.e., /var/www/html
sudo cp -r /path/to/BankofAbel/* /var/www/html/
  1. Configure Web Server:
sudo systemctl start [apache2, nginx, httpd]
sudo systemctl restart [apache2, nginx, httpd]
  • Modify corresponding configuration page (/etc/x/x.conf) to connect MySQL
  1. Run Web Application: log in with the credentials abel:qwerty123
http://localhost/login.php

Login Page

alt text

Dashboard

alt text

About

This is a vulnerable web application I developed for my Database Security class at Boston University. It contains possible IDOR and session hijacking attacks in a pseudo-realistic banking web app. The application is built using the LAMP stack.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published