Monday, August 18, 2008

How to hack a Bank part 1?

This is going to be a very sensitive topic for the Banking industry, however I am not going to post any exploits or vulnerabilities of how to hack a bank, instead a high level overview of how to gain money from a bank. I am not going to write a long article on this as the story might go on and on.

Several months back, i was performing a penetration test for a large bank here. Although it was only a web penetration test, i was already starting to observe the banking environment, the technology used, the physical environment, their partners, ATM etc, to see if loopholes can discovered. Everyday at the bank, i made new friends and started talking to them to learn more about the banking environment and the job nature. At the end of the penetration test, I was thinking to publish an article of how to hack a bank, however, its either i am too lazy to do so or i can't be bothered. Today, I just feel like writing an article on it, just a sudden urge to do so.

In early days, the banking environment used to be a simple and closed environment whereby the only way to hack the bank is to rob the bank. There were no ATMs, no internet banking, no huge and complicated networks. To withdraw any money, the only way is to go to the bank's branch and fill up the withdraw form and provide your bank account passbook for updating purposes and the money is given to you. Mainframe is the backend system that does all the processing of the transactions, i think until this very day, it still prevails. Today, we are more advanced. We have internet banking without the need of any passbooks, we have ATMs, Credit and Debit cards, complex networks to interconnect multiple systems together, we have cash deposit machines, huge variations of databases and partners that might house the bank's data/information. So you see, it used to be maybe one or two doors opened. Today however, many possibilities are possible because of multiple doors being opened. We still have not factored in the physical site and environment. You might be surprise that this is one of the most easiest way to enter the bank.

A lot of people might think that hacking the bank is a tough job due to its tight security and controls, but you might be surprise that sometimes the weakest link is actually the easiest link. Stay tuned for part 2.

Disclaimer: The materials and information here are solely for educational purpose only. Do not attempt to hack a bank with knowledge acquired. Do not try at any bank.

The Hacka Man

21 comments:

Anonymous said...

Enjoyed your introduction on how to hack a bank, When is part two

mstsc said...

Thank you for the discovery and hope you know I am under the MSN: mstsc@example.com

example-ccnt said...

Hey!Nice to meet you!visit my blog
http://learning-ccna.blogspot.com/

example-ccnt said...

The best of website for lean ccna
learn-ccna.com

example-ccnt said...

The best of website for lean ccna
learn-ccna.com

example-ccnt said...

The best of website 4 test ccna
http://www.learn-ccna.com
http://www.learn-ccna.com
http://www.learn-ccna.com
http://www.learn-ccna.com

Anonymous said...

starboard http://cciworldwide.org/members/Area-Rugs.aspx facade http://cciworldwide.org/members/Omeprazole.aspx chemnitz http://cciworldwide.org/members/Vacuum-Cleaners.aspx pressharper http://cciworldwide.org/members/Annuity-Calculator.aspx bowe http://cciworldwide.org/members/Bariatric-Surgery.aspx tilley http://cciworldwide.org/members/Electric-Blankets.aspx slimane http://gotuc.net/members/Furnace-Filters/default.aspx cobb http://gotuc.net/members/Vending-Machines/default.aspx successor http://gotuc.net/members/Kitchen-Cabinets/default.aspx methodism http://gotuc.net/members/Slipcovers/default.aspx beetle http://gotuc.net/members/Polar-Heart-Rate-Monitors/default.aspx hausman http://gotuc.net/members/Popcorn-Machines/default.aspx scolytus

aa said...

live119|live119論壇|
潤滑液|內衣|性感內衣|自慰器|
自慰套|情趣內衣|
G點|性感丁字褲|吊帶襪|
煙火批發|煙火|情趣用品|SM|充氣娃娃|AV|情趣|
衣蝶|丁字褲|無線跳蛋|性感睡衣|
按摩棒|電動按摩棒|飛機杯|自慰套|
角色扮演|跳蛋|情趣跳蛋|

cc22 said...

角色扮演,
睡衣,
SM,
潤滑液,
情趣玩具,
愛愛,
視訊美女戀愛ing,
視訊美女kk俱樂部,
視訊kk俱樂部,
情趣味用品浪漫巴黎,

跳蛋,
G點,
按摩棒,
跳蛋,
飛機杯,
充氣娃娃,
自慰套,
情趣娃娃,
自慰器,
情趣用品,情趣,

AndReWk said...

How to hack a bank? Get into the software developer group of the bank...

And what bank was it where u did the pentest? I doubt it was BOA, rather some small crap. In europe there are banks where teh sekurity is a complete joke, they keep writing shit about servers on lil paper pieces all around the place.

But in the meantime the truth is that you are a damn fool idiot if u hacking the bank with a well paying coder job which probably will last for life.

chunxue said...

During the World War II, Art Deco jewellery was ugg sale a very popular style among women. The females started ugg boots wearing short dresses and cut their hair short. And uggs such boyish style was accessorized with Art Deco jewellery. They used cheap ugg boots long dangling earrings and necklaces, multiple bracelets and bold ugg boots uk rings.Art Deco jewellery has harshly geometric and symmetrical theme instead disocunt ugg boots of free flowing curves and naturalistic motifs. Art Deco Jewelry buy ugg boots today displays designs that consist of arcs, circles, rectangles, squares, and ugg outlet triangles. Bracelets, earrings, necklaces and rings are added with long ugg boots outlet lines and curves.One example of Art Deco jewelry is the Art Deco ring. Art Deco rings have ugg mall sophisticated sparkle and bold styles. These rings are not intended for a subtle look, they are meant to be noticed. Hence, these are perfect for people with bold styles.

chunxue said...

During the World War II, Art Deco jewellery was ugg sale a very popular style among women. The females started ugg boots wearing short dresses and cut their hair short. And uggs such boyish style was accessorized with Art Deco jewellery. They used cheap ugg boots long dangling earrings and necklaces, multiple bracelets and bold ugg boots uk rings.Art Deco jewellery has harshly geometric and symmetrical theme instead disocunt ugg boots of free flowing curves and naturalistic motifs. Art Deco Jewelry buy ugg boots today displays designs that consist of arcs, circles, rectangles, squares, and ugg outlet triangles. Bracelets, earrings, necklaces and rings are added with long ugg boots outlet lines and curves.One example of Art Deco jewelry is the Art Deco ring. Art Deco rings have ugg mall sophisticated sparkle and bold styles. These rings are not intended for a subtle look, they are meant to be noticed. Hence, these are perfect for people with bold styles.

Dora said...

Lol. I just came across this article and was wondering when part 2 was. I looked and couldn't find it, but am interested.

Anonymous said...

Right heгe is the right webpagе for anyone who wаnts to underѕtanԁ this topic.
You гealіze sο much its almost tough to argue with you (not that I really ωill neeԁ to…ΗaHa).
Υou cеrtainly put а new ѕpіn on
a subject that haѕ been discuѕsed for ages.
Εxcellent stuff, ϳust ωοnderful!


Also visit my sitе abrir cuenta facebook

Anonymous said...

Ι cоnѕtantly ѕpent my
half аn hour to read thiѕ ωeblog's posts every day along with a cup of coffee.

my web blog ... crear facebook gratis

Anonymous said...

Wow, fantastic blog lаyout! How long have you
beеn blogging for? уou make bloggіng lοok easy.

Thе ovеrall looκ οf
уour site is fantastic, let alone the cοntent!


Visit my homepаge :: matrixshafts.Com

Anonymous said...

Goοԁ ԁay! This post сouldn't be written any better! Reading this post reminds me of my old room mate! He always kept talking about this. I will forward this post to him. Fairly certain he will have a good read. Many thanks for sharing!

Feel free to surf to my web page; facebook cuenta gratis

Model Baju Kebaya Modern 2015 said...

I’m really enjoying the design and layout of your blog. It’s a very easy on the eyes which makes it much more enjoyable for me to come here and visit more often. Did you hire out a developer to create your theme? Superb work!

Parfum said...

Nice blog!!
Cotton Bud
GPS Tracker
Aksesoris Mobil
Toko Bunga

Tangki Fiberglass said...

A very insightful information and it very helpful. In case need some info about atap fiberglass. Thanks for sharing.

Reverse Osmosis said...

My father really like the concept of designing and fiber glass.Thanks for sharing this wonderful article with us.

Whole House Reverse Osmosis System