pentest-race-conditions

What problem does it solve?

Concurrency bugs such as race conditions and TOCTOU vulnerabilities can bypass checks and cause duplicate actions, inconsistent states, or security bypasses in web applications. This Skill provides structured guidance to identify, reproduce, and document these issues in authorized assessments.

Core Features & Use Cases

• Identify race-prone operations such as balance transfers, coupon redemption, purchases, votes, or token generation.
• Coordinate multi-step timing attacks using single-endpoint and TOCTOU patterns with common tooling.
• Document impact and remediation steps with reproducible workflows and evidence.

Quick Start

Run a basic race-condition test against a target API to verify timing vulnerabilities and capture evidence.