Kids Securiday Workshop

Aim of the Game

  1. The aim is to get to your goal amount.
  2. Become the richest in the bank!
  3. Start making money out of thin air!
Please note, this guide is for educational purposes only.

Logging into your bank account

  1. Head over to https://banking.teehee.top/.
  2. Use the email address and password provided to you.
  3. Notice the amount of money you have!
  4. Poke around the website and get familiar with it.

Disclosing other people’s bank balances

  1. After logging in, head over to the profile menu option. It should be something like when visiting it, the URL should look like https://banking.teehee.top/profile.php?id=<number>.
  2. Change the number after 'id=' to another number.
  3. Observe the details of the bank account has changed including name, bank balance, and email address.
  4. Use this to identify possible targets to attack!

Logging in as the target

  1. After picking an appropriate target, note down the target’s email address.
  2. Sign out of your account.
  3. Head over to the login screen.
  4. In the email field, enter <email>' #
    5. Like sajeeb@0dd.zone' #
  5. Notice how you gained access to their accounts without even having the password?