Git Product home page Git Product logo

lucideus-repo / unsafe_bank Goto Github PK

View Code? Open in Web Editor NEW
136.0 11.0 71.0 85.51 MB

Vulnerable Banking Suite

License: GNU General Public License v3.0

Dockerfile 0.05% HTML 20.39% PHP 48.10% CSS 4.04% TypeScript 5.21% Shell 0.01% SCSS 16.63% Ruby 0.01% Swift 5.58%
cybersecurity security-vulnerability learn vulnerability-assessment learning-by-doing security-testing mobile-security application-security ethical-hacking whitehat

unsafe_bank's People

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

unsafe_bank's Issues

Backend server is unresponsive

Привет! При добавлении нового пользователя на странице высвечивается надпись backend server is unresponsive. Проверял server_url:server_port/api - выдает welcome UnsafeBank (как у вас написано). В чем может быть дело?

Map port 80 or 443 to Web server

Hi,

What is best option to map port 80 to Web server in your configuration and not map it to port 3000?
Which files needs to be changed in order to have backend accessible when this change is done?

Asking, because when I change some of the port mapping in the Dockerfiles and config files, and rebuild containers, I'm getting backend inaccessible message.

Is there anything else that needs to be done?

As well can SSL be enabled in the Web container, simply adding listening for port 443 and needed certificates on the NGNIX or there are some other mapping needed in the backend?

Web failed to built

Hello,

Im using MacOs Monterey 12.4

docker version
Client:
Cloud integration: v1.0.25
Version: 20.10.16
API version: 1.41
Go version: go1.17.10
Git commit: aa7e414
Built: Thu May 12 09:20:34 2022
OS/Arch: darwin/amd64
Context: default
Experimental: true

Server: Docker Desktop 4.9.1 (81317)
Engine:
Version: 20.10.16
API version: 1.41 (minimum version 1.12)
Go version: go1.17.10
Git commit: f756502
Built: Thu May 12 09:15:42 2022

i got this error after run docker-compose up -d below, need your kindly help for the resolution:

=> => extracting sha256:ba036c7f95ecc063c84fbe789765b97feefdbc331a31abf9 0.0s
=> => extracting sha256:a46fd6a16a7c6563c064f8ad9197db0bcf1191095cc3af29 0.0s
=> [internal] load build context 0.4s
=> => transferring context: 11.59MB 0.4s
=> [build 2/5] WORKDIR /app 0.3s
=> [build 3/5] COPY . /app 0.1s
=> ERROR [build 4/5] RUN yarn -s 59.9s

[build 4/5] RUN yarn -s:
#12 0.831 warning Pattern ["redux-thunk@latest"] is trying to unpack in the same destination "/usr/local/share/.cache/yarn/v6/npm-redux-thunk-2.3.0-51c2c19a185ed5187aaa9a2d08b666d0d6467622-integrity/node_modules/redux-thunk" as pattern ["redux-thunk@^2.3.0"]. This could result in non-deterministic behavior, skipping.
#12 38.74 warning " > [email protected]" has unmet peer dependency "[email protected] - 3".
#12 38.74 warning " > [email protected]" has unmet peer dependency "popper.js@^1.16.1".
#12 38.74 warning " > [email protected]" has unmet peer dependency "prop-types@>=15".
#12 38.74 warning " > @testing-library/[email protected]" has unmet peer dependency "@testing-library/dom@>=5".


executor failed running [/bin/sh -c yarn -s]: exit code: 1
ERROR: Service 'web' failed to build : Build failed

Unable to build web container

Hi,

i've read closed issues about same problem, but nothing change.
Always the same during yarn -s process, i've got many unmet dependencies.

I tried to fix them manually, but nothing work that way.
Sure, it's about versions.

I'll wait the correct fix to give it another try.
Regards.

web fails to compile

Just leaving it here for someone else who suffered:

  1. Change UnSAFE_Bank/Backend/web/Dockerfile entries:

Old: FROM node:13.12.0-alpine as build
New: FROM node:14-alpine as build

Using the 13.12.0 default throws an error in pretty-format, since it expects v12 or v14. v16 could work but for the sake of this project's aim, it might be too new :)

  1. Add the following line before RUN yarn -s line:

RUN npm install popper.js jquery prop-types @testing-library/[email protected] [email protected]

These packages were annoying me the most. The first four didn't install at all via yarn.lock, and trying to use yarn add prior to yarn -s didn't help and I had to use npm. @testing-library/dom in particular had to be manually specified, otherwise a too new version would install causing pretty-format would complain about the TOS file being incorrect. Finally, node-sass had to be specified to version 4.14.1, as the default specified in yarn.lock (v7) was not compatible (you need at least NodeJS v17 to run node-sass v7).

  1. Comment out the entire node-sass entry from web/yarn.lock; we're installing it via npm instead in Step 2 :)

After doing these changes, docker-compose up -d will succeed, and you can access the Web GUI from http://localhost:3000

Thanks to Abraham for this post in helping me get the right version of node-sass. The rest was just experience, frustration, pain, and a string of what-ifs.

Android support

Hi,

Is android support on the roadmap and still something you are considering or you will only support iOS?

Thanks,
Miha

db issues when building with docker

~/Downloads/Mobile_Training/UnSAFE_Bank-master/Backend/ sudo docker-compose up -d --build
[+] Building 0.4s (2/3)
[+] Building 0.6s (3/3) FINISHED
=> [db internal] load build definition from Dockerfile 0.0s
=> => transferring dockerfile: 193B 0.0s
=> [db internal] load .dockerignore 0.0s
=> => transferring context: 2B 0.0s
=> ERROR [db internal] load metadata for docker.io/library/mysql:8.0.19 0.5s

[db internal] load metadata for docker.io/library/mysql:8.0.19:


failed to solve: mysql:8.0.19: error getting credentials - err: exit status 1, out: ``

Adding Account number details in the Fund transfer

Hi,

I would like to add additional field (account number) to Fund transfer data details.

I checked "handleBankFundTransferThunk.ts" in the " web/src/app/thunks/BankTransfer/" and I can see that additional fields are possible when under "data" structure, like:

const handleBankFundTransfer = (
token: string,
alias: string,
amount: string,
accountNumber: string,
remarks: string,
otpRespose: string
) => (dispatch: Dispatch) => {
axios
.post(routes.api.fundTransfer.payBankTransfer, {
requestBody: {
timestamp: "325553",
device: {
deviceid: "UHDGGF735SVHFVSX",
os: "ios",
host: "lucideustech.com"
},
data: {
alias: alias,
amount: amount,
account_number: accountNumber,
remarks: remarks,
otp_response: otpRespose
}
}

I can see that there are other files related to payment handling:

web/src/app/slices/BankTransferSlice.ts
web/src/app/components/Pages/FundTransfer/BankTransferPage.tsx
web/src/app/store/ReduxState.ts

When ever I tried to modify all files and add "accountNumber" field, I can't rebuild containers, because of errors.
Tried several combinations, but unsuccessful.

Can you just point me where in the structure additional details needs to be added so "accountNumber" field can be included in the Fund transfer details?

Thanks,
Miha

Where is bank account number verified

Hi,

Trying to change format of a bank account number, to actually use IBAN numbers.
I check "AddBeneficiaryPage.tsx", "Model_beneficiary.php" and some other pages, but can't figure it out where you are checking format of the bank account.

I corrected in the DB length of the account number to be max of 30 characters, and also changed some setting in .tsx and .php files.
Docker containers are build, but when I try to add new Beneficiary account, I'm getting error message that account number is not correct.

Any suggestion where I can quickly change this, so I can use more realistic bank accounts for EU?
IBAN looks like this (where length is from 16-30 characters): DE83500105173418298392

/Miha

Android App support

Hi,

I already asked for Android app, but would like to know if there is any progress and when Android app will be available?
Is there any timeline?

Thanks,
Miha

Service 'web' failed to build

$ docker-compose up -d
Building web
Step 1/12 : FROM node:alpine as build
---> fa2fa5d4e6f4
Step 2/12 : WORKDIR /app
---> Using cache
---> e25c8210dbba
Step 3/12 : COPY . /app
---> Using cache
---> 580e1e2cfd31
Step 4/12 : ENV PATH /app/node_modules/.bin:$PATH
---> Using cache
---> d5d559e29acd
Step 5/12 : RUN yarn -s
---> Running in da944c42d4db
warning @testing-library/jest-dom > css > [email protected]: Please see https://github.com/lydell/urix#deprecated
warning @testing-library/jest-dom > css > source-map-resolve > [email protected]: Please see https://github.com/lydell/urix#deprecated
warning @testing-library/jest-dom > css > source-map-resolve > [email protected]: https://github.com/lydell/resolve-url#deprecated
warning @testing-library/react > @types/testing-library__react > @types/[email protected]: This is a stub types definition. testing-library__dom provides its own type definitions, so you do not need this installed.
warning @types/reactstrap > [email protected]: You can find the new Popper v2 at @popperjs/core, this package is dedicated to the legacy v1
warning @types/[email protected]: This is a stub types definition for Redux (https://github.com/reactjs/redux). Redux provides its own type definitions, so you don't need @types/redux installed!
warning node-sass > [email protected]: request has been deprecated, see request/request#3142
warning node-sass > node-gyp > [email protected]: request has been deprecated, see request/request#3142
warning node-sass > request > [email protected]: this library is no longer supported
warning react-scripts > [email protected]: This loader has been deprecated. Please use eslint-webpack-plugin
warning react-scripts > jest-environment-jsdom-fourteen > jsdom > [email protected]: request has been deprecated, see request/request#3142
warning react-scripts > webpack-dev-server > [email protected]: Chokidar 2 will break on node v14+. Upgrade to chokidar 3 with 15x less dependencies.
warning react-scripts > webpack-dev-server > chokidar > [email protected]: fsevents 1 will break on node v14+ and could be using insecure binaries. Upgrade to fsevents 2.
warning react-scripts > babel-jest > @jest/transform > jest-haste-map > [email protected]: fsevents 1 will break on node v14+ and could be using insecure binaries. Upgrade to fsevents 2.
warning react-scripts > jest-environment-jsdom-fourteen > jsdom > [email protected]: request-promise-native has been deprecated because it extends the now deprecated request package, see request/request#3142
warning react-scripts > webpack > watchpack > watchpack-chokidar2 > [email protected]: Chokidar 2 will break on node v14+. Upgrade to chokidar 3 with 15x less dependencies.
warning react-scripts > workbox-webpack-plugin > workbox-build > @hapi/[email protected]: joi is leaving the @Hapi organization and moving back to 'joi' (hapijs/joi#2411)
warning react-scripts > jest > jest-cli > jest-config > jest-environment-jsdom > jsdom > [email protected]: request has been deprecated, see request/request#3142
warning react-scripts > jest > jest-cli > jest-config > jest-environment-jsdom > jsdom > [email protected]: request-promise-native has been deprecated because it extends the now deprecated request package, see request/request#3142
warning react-scripts > workbox-webpack-plugin > workbox-build > @hapi/joi > @hapi/[email protected]: This version has been deprecated and is no longer supported or maintained
warning react-scripts > workbox-webpack-plugin > workbox-build > @hapi/joi > @hapi/[email protected]: This version has been deprecated and is no longer supported or maintained
warning react-scripts > workbox-webpack-plugin > workbox-build > @hapi/joi > @hapi/[email protected]: This version has been deprecated and is no longer supported or maintained
warning react-scripts > workbox-webpack-plugin > workbox-build > @hapi/joi > @hapi/[email protected]: This version has been deprecated and is no longer supported or maintained
warning react-scripts > workbox-webpack-plugin > workbox-build > @hapi/joi > @hapi/topo > @hapi/[email protected]: This version has been deprecated and is no longer supported or maintained
warning react-scripts > jest > jest-cli > jest-config > jest-environment-jsdom > jsdom > [email protected]: use String.prototype.padStart()
warning react-scripts > workbox-webpack-plugin > workbox-build > strip-comments > babel-plugin-transform-object-rest-spread > babel-runtime > [email protected]: core-js@<3 is no longer maintained and not recommended for usage due to the number of issues. Please, upgrade your dependencies to the actual version of core-js@3.
warning reactstrap > react-popper > [email protected]: You can find the new Popper v2 at @popperjs/core, this package is dedicated to the legacy v1
error An unexpected error occurred: "https://registry.yarnpkg.com/@fortawesome/free- solid-svg-icons/-/free-solid-svg-icons-5.15.1.tgz: ESOCKETTIMEDOUT".
ERROR: Service 'web' failed to build : The command '/bin/sh -c yarn -s' returned a non-zero code: 1

Getting load metadata error.

Hi,

I am getting load metadata error on running docker-compose inside Backend folder:

Command : sudo docker-compose up -d

Machine : MacBook Pro M1 chip

rakeshkirola@Rakeshs-MacBook-Pro Backend % sudo docker-compose up -d

Password:
[+] Building 4.1s (2/4)
=> [internal] load build definition from Dockerfile 0.0s
[+] Building 4.1s (4/4) FINISHED
=> [internal] load build definition from Dockerfile 0.0s
=> => transferring dockerfile: 1.03kB 0.0s
=> [internal] load .dockerignore 0.0s
=> => transferring context: 62B 0.0s
=> ERROR [internal] load metadata for docker.io/library/nginx:alpine 4.0st
=> ERROR [internal] load metadata for docker.io/library/node:13.12.0-alp 4.0st

[internal] load metadata for docker.io/library/nginx:alpine:



[internal] load metadata for docker.io/library/node:13.12.0-alpine:


failed to solve: rpc error: code = Unknown desc = failed to solve with frontend dockerfile.v0: failed to create LLB definition: rpc error: code = Unknown desc = error getting credentials - err: exit status 1, out: ``

Do let me know if more information is required regarding this.

Thanks

=> ERROR [web build 4/5] RUN yarn -s

Hi! I'm having some issues while executing docker-compose up -d

=> ERROR [web build 4/5] RUN yarn -s 113.2s

[web build 4/5] RUN yarn -s:
1.913 warning Pattern ["redux-thunk@latest"] is trying to unpack in the same destination "/usr/local/share/.cache/yarn/v6/npm-redux-thunk-2.3.0-51c2c19a185ed5187aaa9a2d08b666d0d6467622-integrity/node_modules/redux-thunk" as pattern ["redux-thunk@^2.3.0"]. This could result in non-deterministic behavior, skipping.
79.41 warning " > [email protected]" has unmet peer dependency "[email protected] - 3".
79.41 warning " > [email protected]" has unmet peer dependency "popper.js@^1.16.1".
79.42 warning " > [email protected]" has unmet peer dependency "prop-types@>=15".
79.42 warning " > @testing-library/[email protected]" has unmet peer dependency "@testing-library/dom@>=5".


failed to solve: process "/bin/sh -c yarn -s" did not complete successfully: exit code: 1

Any idea why?

Cheers

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.