Technical Assessment Target

CISBank Core Banking Platform

Welcome to your practical interview environment. Your objective is to audit this mock online banking web application for security vulnerabilities, API misconfigurations, and unauthorized parameter tampering.

API Endpoint List

Corporate Checking

$1,425,800.00

+$12,400.00 (SWIFT Inbound)

Account #: CIS-9904-8821-CHK

Escrow Reserves

$8,950,230.50

Interest Rate: 4.85% APY

Account #: CIS-4410-0912-ESC

Pending Wire Transfers

3 Active

Requires Dual-Operator Approval

Total Queue Value: $48,200.00

Initiate Domestic & International Wire

Transfer funds securely via CIS Banking Protocol

API: POST /api/v1/transfer

Source Account

Recipient Account Number / IBAN

Transfer Amount ($ USD)

Reference Memo

Routing Code: 021000021

Interview Target Scope

Test the banking API endpoints for security weaknesses:

GET /api/v1/accounts

POST /api/v1/transfer

GET /api/v1/admin/logs

GET /debug/system_info

Pro Tip: Inspect browser Network DevTools or try parameter pollution on transfer requests!