business-logic-vuln
Entry P1 category router for business logic testing. Use when workflow abuse, race conditions, pricing flaws, or multi-step state attacks matter more than parser-level input injection.
Informations de source
- Dépôt
- Kur1sulab/blackbox
- Dernière activité de la source
- 12 août 2026 à 15:17
- Langue détectée de SKILL.md
- anglais
- Étoiles
- 3
- Forks
- 1
Options d'installation
Le prompt qui vérifie d'abord la source est sélectionné par défaut. Vous pouvez passer à une commande directe ou télécharger une copie locale.
Vérifiez les fichiers source
Lisez SKILL.md et les fichiers associés affichés par SkillsMP avant de décider de l'installer.
Affichage de SKILL.md
SKILL.md
Instructions source · Aperçu en lecture seule- name
- business-logic-vuln
- description
- Entry P1 category router for business logic testing. Use when workflow abuse, race conditions, pricing flaws, or multi-step state attacks matter more than parser-level input injection.
# Business Logic Router
This is the routing entry point for business-logic and state-machine issues.
## When to Use
- The target involves coupons, inventory, payment, approvals, quotas, invites, trials, or state transitions
- The issue is not parser-level; it is about when checks happen and which business conditions are checked
- You suspect race conditions, workflow bypass, price tampering, negative values, stacked discounts, or multi-step flaws
## Skill Map
- [Business Logic Vulnerabilities](../hack-business-logic-vulnerabilities/SKILL.md)
## Recommended Flow
1. First map key business states and one-time actions
2. Then check for check-then-act windows, sequence dependencies, or missing cross-step authorization
3. If the chain depends on APIs, uploads, or object permissions, return to the corresponding router skill to complete the path
## Related Categories
- [api-sec](../hack-api-sec/SKILL.md)
- [auth-sec](../hack-auth-sec/SKILL.md)
- [file-access-vuln](../hack-file-access-vuln/SKILL.md)
Voir sur GitHub