HDFC Bank MobileBanking App

com.snapwork.hdfc (1.4.6)

Security Rating

7.2

AVERAGE

DOWNLOAD REPORT

VIEW CERTIFICATE

HIDE REPORT

SHARE

OPEN REPORT MENU

SUMMARY

ISSUES SEVERITY

MANIFEST SCANNER

exported activity

MEDIUM

resources/AndroidManifest.xml

VULNERABILITIES

weak crypto algorithms

LOW

sources/com/google/android/gms/measurement/internal/zzln.java

STRINGS

facebook client id

LOW

resources/res/values/strings.xml

ASSETS

rest api

LOW

sources/com/lookout/shaded/slf4j/LoggerFactory.java

0 CRITICAL severity MANIFEST issues present

0 HIGH severity MANIFEST issues present

4 MEDIUM severity MANIFEST issues present

0 LOW severity MANIFEST issues present

0 INFO severity MANIFEST issues present

0 RESILIENCE severity MANIFEST issues present

0 CRITICAL severity VULNERABILITIES issues present

0 HIGH severity VULNERABILITIES issues present

34 MEDIUM severity VULNERABILITIES issues present

20 LOW severity VULNERABILITIES issues present

75 INFO severity VULNERABILITIES issues present

0 RESILIENCE severity VULNERABILITIES issues present

0 CRITICAL severity STRINGS issues present

0 HIGH severity STRINGS issues present

0 MEDIUM severity STRINGS issues present

1851 LOW severity STRINGS issues present

0 INFO severity STRINGS issues present

0 RESILIENCE severity STRINGS issues present

0 CRITICAL severity ASSETS issues present

0 HIGH severity ASSETS issues present

0 MEDIUM severity ASSETS issues present

6364 LOW severity ASSETS issues present

0 INFO severity ASSETS issues present

0 RESILIENCE severity ASSETS issues present

ISSUES

Weak Crypto Algorithms - 6 issues

Non-parameterized SQL Query - 7 issues

Accepting all SSL certificates - 1 issues

Possible Task Hijacking - 1 issues

Tapjacking attack prevention by app - 3 issues

Possible Object Deserialization - 11 issues

Accept Self Signed Certificate - 19 issues

Insecure Random Used - 55 issues

WebView ignores SSL errors - 1 issues

CBC Padding Oracle Attack Possible - 1 issues

Insecure Pending Intent - 1 issues

WebView javascript enabled - 2 issues

Remote WebView debugging enabled - 2 issues

Use of SafetyNet API for device integrity check by app - 14 issues

Jackson Deserialization used - 1 issues

Check for rooted device by app - 3 issues

Storage of sensitive information in Shared Preferences - 1 issues

MALWARES

0

MALWARES

APKiD

7

APKiD

STRINGS

Facebook Client ID - 1 matches

Google API Key - 3 matches

Unknown High Entropy String - 33 matches

Possible Secret Detected - 40 matches

Possible UUID - 1774 matches

ASSETS

REST API - 828 matches

File path - 2001 matches

URL - 1380 matches

Hostname - 796 matches

Filename - 483 matches

Relative Endpoint - 744 matches

PERMISSIONS SUMMARY

Permissions

Count

Safe

14

Risky

12

Dangerous

0

ASSETS WORDCLOUD

backbase-android-uat-59882.firebaseio.com - 1 count

play.google.com - 11 count

portaluat.hdfcbank.com - 19 count

metadata.google.internal - 1 count

accounts.google.com - 3 count

developers.google.com - 4 count

example.com - 2 count

angularjs.org - 3 count

myapp.example.com - 1 count

www.gravatar.com - 1 count

google.com - 3 count

backbase.com - 13 count

en.wikipedia.org - 9 count

docs.angularjs.org - 7 count

www.slideshare.net - 4 count

TRACKERS

3

TRACKERS

THIRD PARTY LIBRARIES

90

THIRD PARTY LIBRARIES

CONTACT

Website

http://www.hdfcbank.com

Email

[email protected]

HIDE REPORT

Are you the developer or owner of this app? Choose to keep your report private from BeVigil's Search for 30 days.

HIDE

Introducing the enhanced HDFC Bank MobileBanking App, your one-stop solution to a seamless and secure banking experience. Experience the convenience of doing 150+ transactions through our MobileBanking app. Download now for effortless banking, fund transfers, card management, loans, investments, and many more. 🔒 Instant Access: Experience hassle-free logins via biometric options and a 4-digit login PIN, ensuring the security of your accounts. 💸 Effortless Transactions: Make quick transfers using UPI, ensuring real-time fund transfer. Safeguard your account with the ability to block debit services against fraud. 🔢 Banking Simplified: Get a consolidated view of your account balances, fixed/recurring deposits, credit card bills, and utility bills—all in one dashboard. 🏦 Deposits Made Easy: Book FDs and RDs effortlessly with just a tap, providing a smart way to save money anytime, anywhere. 💳 Manage Cards Seamlessly: Easily apply for credit cards, pay bills, manage cards limits, including blocking or hotlisting lost or stolen cards—all conveniently accessible from one place. 📈 Investment Tracking: Track & manage your investments, demat account and effortlessly engage in mutual funds transactions. 📱 Bill Payments On-the-Go: Pay utility bills, DTH, electricity, gas and mobile bills instantly. Set up automated monthly payments for added convenience. 🔄 Quick Money Transfers: Transfer funds effortlessly between HDFC Bank accounts or other accounts via IMPS, UPI, NEFT and various payment methods. 🔒Security Enhancements: Your financial security is our top priority. We are continually enhancing the security features for the safety of your account and transactions. With Device Registration for login from a single trusted device and RASP (Runtime Application Security Protection), we protect you from frauds involving remote control apps, data leakage, and screen mirroring. We have an enhanced layer of security known as Mobile Number Verification. This feature ensures access to your MobileBanking App only through devices with the SIM card of your bank-registered mobile number, significantly boosting protection against cyber fraud and enhancing your account's security. Please Note, you need to - • Ensure the SIM card of your bank-registered mobile number is in your Mobile device. • Maintain an active SMS subscription for mobile number verification. • Have your Debit Card details or NetBanking password ready for one-time verification. 👥 Smart Features: • One Touch Share: Share payment receipts effortlessly. • Set Up Favorites: Simplify frequent transactions by setting up favorites. • EVA ChatBot Support: Chat with EVA for instant query resolution—accepts both text and voice inputs. 📌 Additional Services: Download e-TDS certificates, Apply for Loans, Recharge & Buy FAS Tag, Savings Accounts, Credit Cards, Buy Insurance & Forex Cards. 📥 Download Now & #BankTheWayYouLive: Continuous app updates and upgrades ensure you have the latest features. 🔗 Important Disclosures: By downloading the HDFC Bank MobileBanking App: *you consent to the installation of this app and its future updates and upgrades. You can withdraw your consent at any time by deleting the app from your device, *you are agreeing and providing consent to have read and understood the privacy notice of HDFC Bank. To know more about the privacy notice, please click here. https://www.hdfcbank.com/aboutus/terms_conditions/privacy.htm