skills.rest
cybersecwoman
cybersecwomanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

hunt-business-logic

Identify and exploit business logic vulnerabilities in financial transactions and access controls.

5|Updated May 27, 2026
Search Tags:#access control#business logic#application security#financial security#vulnerability hunting
One-click install
npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-business-logic-cybersecwoman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-business-logic
Source: https://github.com/cybersecwoman/Kiro-BugHunter/tree/main/skills/hunt-business-logic
Command: npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill hunt-business-logic-cybersecwoman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps security professionals identify and exploit business logic vulnerabilities in applications, particularly those related to financial transactions and access controls.

Core Features & Use Cases

  • Business Logic Vulnerability Hunting: Focuses on financial-impact-demonstrated cases like coupon-race-stacking, price tampering, and archived-price swap.
  • Targeted Platforms: E-commerce, payment platforms, gig economy apps, SaaS with tiered access, and high-traffic consumer apps.
  • Use Case: For example, the Skill can be used to identify vulnerabilities in a shopping cart system that allows for negative quantity price manipulation.

Quick Start

Analyze the business logic of a target application using the hunt-business-logic skill to detect potential vulnerabilities.

Frequently Asked Questions about hunt-business-logic

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify business logic vulnerabilities in financial applications?▼

To identify business logic vulnerabilities in financial applications, analyze the application's business logic to detect flaws like coupon race stacking, price tampering, and negative quantity manipulation in transaction workflows.

What are common business logic flaws in e-commerce payment platforms?▼

Common business logic flaws in e-commerce payment platforms include archived-price swaps and coupon-race-stacking, which allow attackers to manipulate pricing and access controls to achieve unauthorized financial impact.

How do I test access control vulnerabilities in SaaS tiered applications?▼

Testing access control vulnerabilities in SaaS tiered applications requires analyzing business logic boundaries to exploit unauthorized privilege escalation and bypass subscription tier restrictions.

Can I use business logic vulnerability hunting for gig economy apps?▼

Yes, business logic vulnerability hunting applies to gig economy apps by analyzing their specific transaction workflows and access controls to uncover exploitable financial manipulation vectors.

What is the best way to exploit shopping cart price tampering vulnerabilities?▼

Exploiting shopping cart price tampering vulnerabilities involves manipulating quantity parameters to negative values and altering transaction logic to demonstrate financial impact during business logic analysis.

Related Skills

Explore More Software Engineering Skills→
jayjpatel9717jayjpatel9717

business-logic

Detect and analyze business logic vulnerabilities like race conditions and price manipulation.

Community
Advanced
uphiagouphiago
1.1k

hunt-business-logic

Identify business logic vulnerabilities in e-commerce and payment systems.

Community
Intermediate
blacklanternsecurityblacklanternsecurity
253

idor

Test ID formats and injection points for IDOR and access control vulnerabilities.

Official
Advanced
Rune-kitRune-kit
82

sast

Run static analysis tools and normalize findings into unified severity levels.

Official
Advanced