business-logic-attack

What problem does it solve?

Web applications often fail to enforce business rules in server-side logic, allowing attackers to manipulate transactions, orders, and accounts.

Core Features & Use Cases

• Detects price/amount manipulation in payments, quantity manipulation, order-status tampering, coupon/discount abuse, and race-condition risks in transactional flows.
• Provides practical testing steps to reproduce business logic flaws in e-commerce or financial-like apps.
• Use case: testing a checkout flow where changing order_id or price could bypass payments or alter orders.

Quick Start

Simulate price/amount and quantity changes in the checkout flow to verify server-side validation.