What problem does it solve? Race condition vulnerabilities let attackers redeem coupons twice, double-spend balances, inflate votes, or bypass rate limits, yet they are rarely caught by conventional testing because they require precisely timed concurrent requests. This Skill provides a structured hunting methodology, tooling templates, and real disclosed-case references for finding and validating these flaws during authorized bug bounty and red-team engagements. ## Core Features & Use Cases - Attack Surface Mapping: Identifies race-prone endpoints (redeem, vote, transfer, checkout) via URL patterns, response headers, JavaScript patterns, and tech-stack signals such as Rails without locking or Redis counters without atomicity. - Execution Tooling: Provides ready-to-adapt Turbo Intruder (Engine.BURP2), curl, and Python asyncio templates for firing 10-50 synchronized parallel requests, including the HTTP/2 single-packet last-byte-sync technique and Flatt Security's first-sequence-sync extension for 10,000-request batches. - Validation & Reporting Gate: Enforces a Gate 0 checklist (demonstrable duplicate effect, concrete victim impact, reproducibility in 3/5 attempts) before a finding is reported. - Use Case: While testing an e-commerce target, you capture a gift-card redemption request, replay it 20 times via a single HTTP/2 packet, observe the balance credited multiple times, and document a reproducible double-redemption report grounded in cited cases like Reverb H1 #759247 and nopCommerce CVE-2024-58248. ## Quick Start Ask the agent to hunt for race conditions on the target's coupon redemption endpoint using the single-packet parallel request methodology.
