business-logic-testing

What problem does it solve?

This Skill addresses vulnerabilities arising from design flaws in application business processes, which can lead to unauthorized actions, data manipulation, and financial losses.

Core Features & Use Cases

• Workflow Bypass: Detect and exploit methods to skip validation steps or alter process sequences.
• Price & Quantity Manipulation: Identify and test for vulnerabilities related to negative or tampered pricing and quantity limits.
• Concurrency & State Exploitation: Test for race conditions and unauthorized state changes in transactions.
• Use Case: A security tester can use this skill to identify if an e-commerce application allows users to purchase items with a negative price or bypass quantity restrictions, potentially leading to financial loss for the business.

Quick Start

Use the business-logic-testing skill to test for price manipulation vulnerabilities in the purchase API.