Back to Projects
Penetration Testing (VAPT)
Project Sentinel: Fintech Banking VAPT & Zero-Day Mitigation
Comprehensive penetration test uncovering 18 vulnerabilities including 3 critical remote authorization bypasses before production launch.
Client
Global Digital Bank Corp
Timeline
3 Months
Category
Penetration Testing (VAPT)
Architecture & Engineering Deep Dive
Project Sentinel was a rigorous grey-box security audit conducted for a high-volume financial institution processing over $50M in daily transactions.
Key Achievements:
• Discovered 3 Critical IDOR vulnerabilities allowing horizontal account access across customer accounts.
• Validated and demonstrated a blind SSRF vector in the cloud payment gateway that could leak internal AWS metadata.
• Delivered a 95-page technical report with remediation code samples in Laravel and Node.js.
• Conducted re-testing post-patching, verifying 100% vulnerability closure and securing PCI-DSS compliance.
Key Achievements:
• Discovered 3 Critical IDOR vulnerabilities allowing horizontal account access across customer accounts.
• Validated and demonstrated a blind SSRF vector in the cloud payment gateway that could leak internal AWS metadata.
• Delivered a 95-page technical report with remediation code samples in Laravel and Node.js.
• Conducted re-testing post-patching, verifying 100% vulnerability closure and securing PCI-DSS compliance.
System Screenshots & Gallery
Technologies Employed
Burp Suite Pro
OWASP Top 10
Python
Postman
Linux
Kali OS
Need a Similar Solution?
Let's discuss how we can engineer a tailored application with the same high performance and architectural elegance.
Schedule Consultation