The CRAFTY FALCON chain
Eight attack steps from the CERT-In advisory against a fake NBFC — stolen credentials, a ₹1 probe, a UAT key in prod, a changed settlement account, a Diwali burst, and a planted canary. Run it in enforce to watch the line hold, then shadow to see that nothing would have been blocked in observe-only mode.
Evaluate your own payout
Same evaluation the gateway runs. The beneficiary identifier is hashed in-page — the engine only ever sees hb1_….
Engine state
loading…