VulnBank – Intentionally Vulnerable Web Application for Security Testing

You can copy this text: VulnBank is a web application I built to practice and demonstrate web penetration testing and application security skills. The project simulates a simple banking system that intentionally contains common web vulnerabilities for educational and testing purposes. Project Goals: Practice real-world web application security testing Understand how vulnerabilities appear in real applications Learn how attackers exploit weaknesses and how to fix them Implemented Vulnerabilities: SQL Injection (Authentication & Search) Cross-Site Scripting (Stored & Reflected XSS) Broken Authentication & Session Issues Insecure Direct Object Reference (IDOR) Cross-Site Request Forgery (CSRF) Weak Input Validation & Improper Error Handling Features of the Application: User registration and login system Account dashboard and balance display Money transfer functionality Transaction history page Admin panel simulation Technologies Used: HTML, CSS, JavaScript Backend (Python) Simple database integration Security Learning Outcome: This project helped me understand the full penetration testing workflow including reconnaissance, vulnerability discovery, exploitation, and reporting. This project is intended for educational purposes and security training only.