Joeten's Posts

Nairaland Forum › Joeten's Profile › Joeten's Posts

1 (of 1 pages)

Programming › Re: Bug In Bank Application That Spits Out Account Balance And Customer Details by joeten(op): 4:18pm On Sep 28, 2022

LogicBomb8:
Correct me if am wrong but This look like command line. I see bvn number this is alarming

Sincerely a drop of few errors that i have discovered from most of these banks.
A prominent bank has people cards left hanging for anybody smart enough too mine off.

There is no proper channel to report through without it biting back and definitely such white hat act would be frowned upon than praised

Programming › Re: Bug In Bank Application That Spits Out Account Balance And Customer Details by joeten(op): 4:16pm On Sep 28, 2022

airsaylongcome:
API endpoint don cast! DevOps go hear wheen for this operational leak.

Na to run Postman on the endpoint o! I hope this isn't a Fineract server leaking like water o

Edit:
Looks like a Temenos T24 Core Banking server.

OP, please obfuscate the data more. I can tell that it's an account belonging to Omolara Adeyemi. Phone number fully visible. Please protect their details

Thanks for that. Thought i had it done properly.
Sensitive details better obfuscated now

Programming › Re: Bug In Bank Application That Spits Out Account Balance And Customer Details by joeten(op): 3:32pm On Sep 28, 2022

What y'all think?

Programming › Bug In Bank Application That Spits Out Account Balance And Customer Details by joeten(op): 3:12pm On Sep 28, 2022*

It would be nice if banks ran bug bounties.
And this is just the tiniest mistake out there..

This breach + a bot and user data will literally be mined off their servers

1 (of 1 pages)