What problem does it solve? Security researchers and bug bounty hunters often miss high-impact business logic flaws because they lack a structured methodology for testing payment flows, verification gates, and rate limits beyond automated scanners. ## Core Features & Use Cases - Attack Surface Mapping: Identifies crown jewel targets like checkout flows, payment webhooks, and internal employee portals through URL patterns, JS bundle analysis, and response header signals. - Step-by-Step Hunting Methodology: Provides a 7-step workflow covering authentication boundary mapping, verification flow testing, rate-limit bypass via header rotation, and in-flight payment tampering with Burp Suite. - Real-World Case Library: Includes 12 disclosed HackerOne reports (Stripe, Reverb, Upserve, Krisp) with payloads, root causes, and bounty amounts for pattern matching. - Use Case: A researcher testing an e-commerce target uses the negative-quantity-in-cart payload pattern and the Gate 0 validation checklist to confirm a reproducible price manipulation bug before reporting. ## Quick Start Use the hunt-business-logic skill to plan an evidence-gated business logic test against my authorized bug bounty target's checkout and subscription endpoints.
