web-app-logic

Files (56)

• SKILL.md
• INDEX.md · reference/
• access-control-resources.md · reference/
• business-logic-resources.md · reference/
• information-disclosure-resources.md · reference/
• race-conditions-resources.md · reference/
• data-leakage-redirect.md · reference/scenarios/access-control/
• header-bypass.md · reference/scenarios/access-control/
• idor-action.md · reference/scenarios/access-control/
• idor-read.md · reference/scenarios/access-control/
• mass-assignment.md · reference/scenarios/access-control/
• method-bypass.md · reference/scenarios/access-control/
• multi-step-bypass.md · reference/scenarios/access-control/
• parameter-based-controls.md · reference/scenarios/access-control/
• referer-bypass.md · reference/scenarios/access-control/
• unprotected-functionality.md · reference/scenarios/access-control/
• burp-extension-scanner.md · reference/scenarios/business-logic/
• coupon-stacking.md · reference/scenarios/business-logic/
• csrf-and-session-bypass.md · reference/scenarios/business-logic/
• email-domain-bypass.md · reference/scenarios/business-logic/
• gift-card-loop.md · reference/scenarios/business-logic/
• parameter-pollution.md · reference/scenarios/business-logic/
• price-manipulation.md · reference/scenarios/business-logic/
• quantity-manipulation.md · reference/scenarios/business-logic/
• regex-input-validation-bypass.md · reference/scenarios/business-logic/
• workflow-bypass.md · reference/scenarios/business-logic/
• deception-delimiter.md · reference/scenarios/cache/
• deception-normalization.md · reference/scenarios/cache/
• deception-path-mapping.md · reference/scenarios/cache/
• deception-via-smuggling.md · reference/scenarios/cache/
• poisoning-body-args.md · reference/scenarios/cache/
• poisoning-setnx-race.md · reference/scenarios/cache/
• poisoning-unkeyed-headers.md · reference/scenarios/cache/
• poisoning-unkeyed-params.md · reference/scenarios/cache/
• backups-and-version-control.md · reference/scenarios/info-disclosure/
• client-side-storage-audit.md · reference/scenarios/info-disclosure/
• debug-pages-and-cms-apis.md · reference/scenarios/info-disclosure/
• error-messages.md · reference/scenarios/info-disclosure/
• http-method-disclosure.md · reference/scenarios/info-disclosure/
• javascript-source-review.md · reference/scenarios/info-disclosure/
• multi-port-and-storage-discovery.md · reference/scenarios/info-disclosure/
• security-headers-audit.md · reference/scenarios/info-disclosure/
• advanced-techniques.md · reference/scenarios/race-conditions/
• container-startup-admin-registration.md · reference/scenarios/race-conditions/
• detection-and-baseline.md · reference/scenarios/race-conditions/
• file-upload-race.md · reference/scenarios/race-conditions/
• limit-overrun.md · reference/scenarios/race-conditions/
• multi-endpoint.md · reference/scenarios/race-conditions/
• partial-construction.md · reference/scenarios/race-conditions/
• rate-limit-bypass.md · reference/scenarios/race-conditions/
• single-endpoint-collision.md · reference/scenarios/race-conditions/
• timestamp-collision.md · reference/scenarios/race-conditions/
• toctou-session.md · reference/scenarios/race-conditions/
• web-app-logic-principles.md · reference/
• web-cache-deception-resources.md · reference/
• web-cache-poisoning-resources.md · reference/

SKILL.md (first lines)

# Web Application Logic

Test for logic flaws and application-specific vulnerabilities that automated scanners miss.

## Techniques

| Type | Key Vectors |
|------|-------------|
| **Business Logic** | Workflow bypass, price manipulation, feature abuse |
| **Race Conditions** | TOCTOU, limit bypass, double-spend, parallel requests |
| **Access Control** | IDOR, horizontal/vertical privilege escalation, forced browsing |
| **Cache Poisoning** | Unkeyed headers/parameters, fat GET, response splitting |
| **Cache Deception** | Path confusion, static extension tricks, normalization |
| **Info Disclosure** | Error messages, debug endpoints, source code, metadata |

## Workflow

1. Map application workflows and business rules
2. Identify state-dependent operations and trust boundaries
3. Test logic assumptions with edge cases and race conditions
4. Verify access control across user roles
5. Document impact with PoC demonstrations

## Reference

- `reference/business-logic*.md` - Business logic testing techniques
- `reference/race-conditions*.md` - Race condition exploitation
- `reference/access-control*.md` - Access control bypass methods
- `reference/web-cache-poisoning*.md` - Cache poisoning techniques
- `reference/web-cache-deception*.md` - Cache deception attacks
- `reference/information-disclosure*.md` - Information disclosure testing

From transilienceai/communitytools, MIT.

More from transilienceai/communitytools