VEB Technologies

Client Background

BelVEB BusinessHub is a platform included in the ecosystem of OJSC “Bank BelVEB”. It allows sellers and buyers to receive reliable information about each other, choose partners and goods, and conclude profitable secure transactions using the tools of BelVEB Bank and additional services provided by the platform.

Challenge

In order to test and improve the ability of the web application to resist cyber attacks, VEBTECH had to identify all the security weaknesses of all components of the web application and reduce the risk of the misuse of network services.

Solution

To conduct high-quality complex testing of the web application and its components, VEBTECH penetration testers used OWASP and NIST methodologies. This approach allows you to identify the most important security flaws in the web application and its infrastructure, and provides detailed instructions on how to eliminate the detected vulnerabilities.

VEBTECH presented a solution that included:

• External and Internal penetration testing;

• Vulnerability Assessment: Detect all vulnerabilities in the target web server and application servers using well-known automated tools, develop custom tests, and manual instrumentation testing.

• Static analysis of source code for vulnerabilities and misconfigurations.

Results

• White-Box penetration testing with the provision of a detailed report containing the testing methodology, a description of vulnerabilities and configuration weaknesses that could be exploited by an attacker, a risk assessment and recommendations for eliminating or minimizing risks.

• Static analysis of the code for vulnerabilities and security flaws with the provision of a detailed report in the format of a developer's workbook.

Client Background 

Coinchange is a digital asset management company that merges services of traditional finance with digital currencies and assets in a safe, convenient and profitable way. Coinchange  is  also  a  fintech platform  that  aims  to  bring  DeFi  and  crypto  wealth management  to  the  general  public  and  provide  high-yield  passive  income,  making everyone a successful investor. 

Challenge 

Aiming to enhance the protection of the web application app.coinchange.io against cyberattacks, VEBTECH needed to identify all security weaknesses of the  web application and mitigate the risk of the misuse of network services. 

Solution 

The security testing approach suggested by VEBTECH was based on OWASP security testing guidelines. VEBTECH presented a solution to Coinchange, which included: 

•Black Box web application Security Testing; 

•Vulnerability Assessment:  discovering all vulnerabilities in  the  target  web  and application servers with the use of known automated tools, developing specific tests and manual instrumental testing. 

Results 

Black Box Testing with the provision of a detailed report that contained: 

•Description of the application testing methodology; 

•Application overview; 

•Severity level and description of vulnerabilities and configuration weaknesses that can be exploited in application components; 

•Evidence; 

•Recommendations for eliminating or minimizing risks; 

•Reference Information.