Requirements

Hello,

I$$m Carter, the CTO of Charles Bank. One of the world$$s most secure banks. Our commitment to security sees us conducting Penetration Testing regularly. We require your services. We$$ve recently rearchitected our rewards platform, and I suspect there may be some security issues.

Can you please conduct a code review and web application penetration test. I$$ve provided you with the source code, you can run the whole app locally on your Kali VM$.$

We want you to use our report template, which has been provided to you.

Security issues

Potential security issues are shown below:

$$ Authorisation $/$ Authentication issues

$$ XSS

$$ CSRF

$$ SQL Injection

$$ Bonus vulnerabilities