HDFC Bank MobileBanking App

com.snapwork.hdfc (11.2.0)

Security Rating

7.2

AVERAGE

DOWNLOAD REPORT

VIEW CERTIFICATE

HIDE REPORT

SHARE

Use BeVigil on your Phone

Download the BeVigil App

OPEN REPORT MENU

SUMMARY

ISSUES SEVERITY

MANIFEST SCANNER

exported activity

MEDIUM

resources/AndroidManifest.xml

VULNERABILITIES

Weak Crypto Algorithms

MEDIUM

sources/com/blankj/utilcode/util/EncryptUtils.java

STRINGS

google api key

LOW

resources/res/values/strings.xml

ASSETS

file path

LOW

resources/AndroidManifest.xml

0 CRITICAL severity MANIFEST issues present

0 HIGH severity MANIFEST issues present

7 MEDIUM severity MANIFEST issues present

0 LOW severity MANIFEST issues present

0 INFO severity MANIFEST issues present

0 RESILIENCE severity MANIFEST issues present

0 CRITICAL severity VULNERABILITIES issues present

1 HIGH severity VULNERABILITIES issues present

31 MEDIUM severity VULNERABILITIES issues present

23 LOW severity VULNERABILITIES issues present

28 INFO severity VULNERABILITIES issues present

0 RESILIENCE severity VULNERABILITIES issues present

0 CRITICAL severity STRINGS issues present

0 HIGH severity STRINGS issues present

43 MEDIUM severity STRINGS issues present

1789 LOW severity STRINGS issues present

0 INFO severity STRINGS issues present

0 RESILIENCE severity STRINGS issues present

0 CRITICAL severity ASSETS issues present

0 HIGH severity ASSETS issues present

5 MEDIUM severity ASSETS issues present

5940 LOW severity ASSETS issues present

0 INFO severity ASSETS issues present

0 RESILIENCE severity ASSETS issues present

ISSUES

Weak Crypto Algorithms - 3 issues

Non-parameterized SQL Query - 8 issues

Accepting all SSL certificates - 1 issues

Tapjacking attack prevention by app - 1 issues

Possible Object Deserialization - 11 issues

CBC Padding Oracle Attack Possible - 1 issues

Accept Self Signed Certificate - 12 issues

Insecure Pending Intent - 1 issues

WebView ignores SSL errors - 1 issues

Insecure Random Used - 28 issues

Use of SafetyNet API for device integrity check by app - 3 issues

Remote WebView debugging enabled - 2 issues

WebView javascript enabled - 4 issues

Check for rooted device by app - 3 issues

Storage of sensitive information in Shared Preferences - 4 issues

MALWARES

0

MALWARES

APKiD

8

APKiD

STRINGS

Google API Key - 3 matches

Generic API Key - 2 matches

Generic Basic Auth token - 1 matches

Possible Secret Detected - 42 matches

Possible UUID - 1772 matches

Unknown High Entropy String - 12 matches

ASSETS

File path - 2001 matches

URL - 1228 matches

REST API - 648 matches

Hostname - 719 matches

Relative Endpoint - 742 matches

Filename - 482 matches

PERMISSIONS SUMMARY

Permissions

Count

Safe

14

Risky

12

Dangerous

0

ASSETS WORDCLOUD

hdfcnewfcm.firebaseio.com - 1 count

play.google.com - 11 count

www.hdfcbank.com - 48 count

leads.hdfcbank.com - 2 count

apply.hdfcbank.com - 5 count

cbuat.hdfcbank.com - 1 count

www.backbase.com - 216 count

portaluat.hdfcbank.com - 17 count

applyonline.hdfcbank.com - 3 count

hdfc-uat-04.adobecqms.net - 1 count

mycards.hdfcbank.com - 1 count

www.sihub.in - 1 count

hbchat.senseforth.com - 2 count

api.whatsapp.com - 2 count

pzlive.page.link - 2 count

TRACKERS

8

TRACKERS

THIRD PARTY LIBRARIES

79

THIRD PARTY LIBRARIES

CONTACT

Website

http://www.hdfcbank.com

Email

[email protected]

HIDE REPORT

Are you the developer or owner of this app? Choose to keep your report private from BeVigil's Search for 30 days.

HIDE

<b>Download the HDFC Bank Mobilebanking App &amp; get access to the best in class features &amp; services for all your banking needs</b> <br><br>The new &amp; improved HDFC Bank MobileBanking app, a convenient, secure &amp; safe mobile banking app designed for customers who are always banking on the go. You can now instantly access both your personal &amp; business bank accounts securely from the convenience of your phone 📱 &amp; bank from home. It truly lets you <b><i>#BankTheWayYouLive</i></b> <br><br>Indulge in the best mobile banking experience with our secure &amp; effortless online banking - get customized alerts, quick access, dashboards, multiple cards management, make online bank transfers, get personal loans, track investments &amp; much more. <br><br><b>Prime features &amp; services:</b> <br><br>📍 <b>Instant Set-Up:</b> <br>There is no activation process ‐ you can simply log in to the app using your Customer ID &amp; IPIN/Password. You may retrieve your Customer ID via NetBanking in case you forget it. If you forget your password, you can select the ‘Forgot Password’ option <br><br>📍 <b>Easy, Safe &amp; Secure Access:</b> <br>Quickly log into your account 🔑 with just your touch ID, remembering passwords or PINs to access your accounts is now a thing of the past. <br><br>📍 <b>Banking Simplified:</b> <br>View real-time total account balance enquiry, fixed &amp; recurring deposits , credit card bills, utility bills &amp; more in one consolidated dashboard<br><br>📍 <b>Quick Money Transfers:</b> <br>Transfer funds 💸 easily between HDFC accounts or other accounts by selecting between IMPS / UPI / NEFT &amp; other payment methods. <br><br>📍 <b>Manage Cards from one place:</b> <br>Apply for a credit card 💳 right from the app, pay credit card bills &amp; even block/hotlist a lost or stolen credit or debit card. <br><br>📍 <b>Track your investments:</b> <br>Users can easily open &amp; manage Fixed Deposits &amp; Recurring Deposits. One can also track their Demat account &amp; easily switch to HDFC securities app where Mutual Funds can be purchased &amp; redeemed easily <br><br>📍 <b>Effortless &amp; Convenient Bill Payments:</b> <br>Pay utility bills, DTH bills, Electricity bills, Gas bill &amp; Mobile bills📱 &amp; pay for recharge, instantly. Even set up automated scheduled monthly payments on the app <br><br>📍 <b>One Touch Share:</b> <br>After making the payments, customers can easily send receipts over any platform <br><br>📍 <b>Set Up Favorites:</b> <br>For all your frequent transactions, you can now set up Favorites – you’ll no longer have to repeatedly add your payment details <br><br>📍 <b>Smart Account Opening:</b> <br>Non-HDFC Bank customers can now instantly open an account through the MobileBanking App. Open app --&gt; More --&gt; Smart Account Opening<br><br>📍 <b>Cardless Cash:</b> <br>This new feature on MobileBanking App will enable customers to send cash from HDFC Bank Account to anyone with a valid mobile number <br><br>📍 <b>eCMS:</b> <br>Electronic Cash Management Services is a specialized online payment service offered to large corporates having a fixed set of customers e.g. dealers, investors etc. <br><br>📍 <b>EVA ChatBot Support:</b> <br>Now chat with EVA (our chatbot) 💬 on MobileBanking App as well. Users can now chat with EVA anytime for instant query resolution. EVA can accept text input &amp; listens to voice input when you tap on the microphone, in the English language <br><br>Besides the services mentioned above, customers can update their Aadhaar details, download e-TDS certificate, apply for Loans, Savings accounts or Credit cards, buy &amp; renew insurance or buy E-gift &amp; Forex cards. <br><br>👉 <b>Download the HDFC Bank MobileBanking app now &amp; <i>#BankTheWayYouLive</i></b> <br><br>Important Disclosures: <br>By downloading the HDFC Bank MobileBanking App: <br>*you consent to the installation of this app and its future updates and upgrades. You can withdraw your consent at any time by deleting the app from your device, <br>*you are agreeing and providing consent to have read and understood the privacy notice of HDFC Bank. To know more about the privacy notice, please click here. <br>https://www.hdfcbank.com/aboutus/terms_conditions/privacy.htm