ABN-AMRO security weaknesses
April 17, 2007
Posted by Roel in : Technical , 1 comment so far
Today i took some time to write a little about ABN-AMRO’s security weaknesses.
This article including it’s examples and example code (which will be posted later) are for educational purposes only.
Account blocking
It’s made too simple to lock an account for internet banking. Going to https://www.abnamro.nl/nl/homepage/overview.html and typing an existing bank account number with any card number, submit this 5 times and the account will be locked.
The owner of the account needs to call the Service Center (or submit a letter/fax) and request to unlock his/her account. This takes some time,.. meanwhile he/she cannot enjoy internet banking or online stock trading.
You might think: “Nothing wrong, it’s just one account”.
Wrong!, imagine building a script, blocking all account numbers of all internet banking customers.
(more…)
