business-logic-vulnerabilities

Auditing business logic vulnerabilities requires structured playbooks and scenario-based guidance to identify exploitable workflow gaps. This skill applies safe, pragmatic testing methodologies to assess multi-step authentication flows, race conditions, and payment manipulation across web and API services.

A race condition vulnerability occurs when concurrent requests exploit timing flaws in workflow processing. This skill provides attack playbooks and scenario guidance to safely test race conditions, helping teams identify and remediate exploitable gaps before release.

Detecting coupon and referral abuse involves auditing business processes to identify exploitable workflow gaps. This skill provides comprehensive attack playbooks and scenario-based guidance to safely test coupon abuse and validate mitigations in software systems.

Scenario-based testing is fully supported for multi-step authentication bypass flaws. The skill includes companion materials and structured playbooks in SCENARIOS.md, providing pragmatic testing methodologies to audit and remediate complex multi-step authentication flows.

Remediating price manipulation and state-machine bypass issues requires structured attack playbooks and companion references to validate mitigations. This skill provides safe methodology for auditing business processes and reasoning about complex workflows to harden systems.

No external dependencies are required for this security testing skill. It operates independently using structured playbooks, scenario guidance, and pragmatic testing methodologies to identify and remediate business-logic vulnerabilities in software systems.