Individual skill

web-app-logic

Web application logic testing - business logic flaws, race conditions, access control, cache poisoning/deception, and information disclosure.

skills/web-app-logic/SKILL.md

Read pinned source

Source commit 95fdc128af4ca1ae16b3226f9430f1bad97b0656

What was checked

Matches the observed repository HEAD: Yes
Scanner rules are current: No
Repository scan complete: No
Skill scan complete: No
Observed behavior: Not checked yet
Last checked: Nov 5, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings): 611
Repository last updated: Jul 29, 2026
License: MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

bounty-hunters Repository topic
hackerone Repository topic
pentest Repository topic
pentest-tool Repository topic
security Repository topic
security-research Repository topic
security-tools Repository topic
testing Derived category

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files

SKILL.mdcore · 1,540 bytes
SKILL.mdcore · 1,540 bytes
reference/INDEX.mddoc · 6,846 bytes
reference/access-control-resources.mddoc · 5,056 bytes
reference/business-logic-resources.mddoc · 4,844 bytes
reference/information-disclosure-resources.mddoc · 5,639 bytes
reference/race-conditions-resources.mddoc · 4,950 bytes
reference/scenarios/access-control/data-leakage-redirect.mddoc · 2,519 bytes
reference/scenarios/access-control/header-bypass.mddoc · 6,049 bytes
reference/scenarios/access-control/idor-action.mddoc · 3,002 bytes
reference/scenarios/access-control/idor-read.mddoc · 7,525 bytes
reference/scenarios/access-control/mass-assignment.mddoc · 5,841 bytes
reference/scenarios/access-control/method-bypass.mddoc · 2,964 bytes
reference/scenarios/access-control/multi-step-bypass.mddoc · 2,033 bytes
reference/scenarios/access-control/parameter-based-controls.mddoc · 2,863 bytes
reference/scenarios/access-control/referer-bypass.mddoc · 1,944 bytes
reference/scenarios/access-control/unprotected-functionality.mddoc · 2,382 bytes
reference/scenarios/business-logic/burp-extension-scanner.mddoc · 5,311 bytes
reference/scenarios/business-logic/coupon-stacking.mddoc · 6,698 bytes
reference/scenarios/business-logic/csrf-and-session-bypass.mddoc · 2,988 bytes
reference/scenarios/business-logic/email-domain-bypass.mddoc · 3,485 bytes
reference/scenarios/business-logic/gift-card-loop.mddoc · 8,120 bytes
reference/scenarios/business-logic/parameter-pollution.mddoc · 6,454 bytes
reference/scenarios/business-logic/price-manipulation.mddoc · 4,932 bytes
reference/scenarios/business-logic/quantity-manipulation.mddoc · 7,364 bytes
reference/scenarios/business-logic/regex-input-validation-bypass.mddoc · 2,231 bytes
reference/scenarios/business-logic/workflow-bypass.mddoc · 4,241 bytes
reference/scenarios/cache/deception-delimiter.mddoc · 2,478 bytes
reference/scenarios/cache/deception-normalization.mddoc · 2,511 bytes
reference/scenarios/cache/deception-path-mapping.mddoc · 2,627 bytes
reference/scenarios/cache/deception-via-smuggling.mddoc · 1,904 bytes
reference/scenarios/cache/poisoning-body-args.mddoc · 5,579 bytes
reference/scenarios/cache/poisoning-setnx-race.mddoc · 8,354 bytes
reference/scenarios/cache/poisoning-unkeyed-headers.mddoc · 6,845 bytes
reference/scenarios/cache/poisoning-unkeyed-params.mddoc · 4,928 bytes
reference/scenarios/info-disclosure/backups-and-version-control.mddoc · 3,324 bytes
reference/scenarios/info-disclosure/client-side-storage-audit.mddoc · 2,867 bytes
reference/scenarios/info-disclosure/debug-pages-and-cms-apis.mddoc · 3,388 bytes
reference/scenarios/info-disclosure/error-messages.mddoc · 2,959 bytes
reference/scenarios/info-disclosure/http-method-disclosure.mddoc · 2,327 bytes
reference/scenarios/info-disclosure/javascript-source-review.mddoc · 2,775 bytes
reference/scenarios/info-disclosure/multi-port-and-storage-discovery.mddoc · 4,388 bytes
reference/scenarios/info-disclosure/security-headers-audit.mddoc · 5,246 bytes
reference/scenarios/race-conditions/advanced-techniques.mddoc · 4,319 bytes
reference/scenarios/race-conditions/container-startup-admin-registration.mddoc · 3,896 bytes
reference/scenarios/race-conditions/detection-and-baseline.mddoc · 6,877 bytes
reference/scenarios/race-conditions/file-upload-race.mddoc · 2,848 bytes
reference/scenarios/race-conditions/limit-overrun.mddoc · 2,484 bytes
reference/scenarios/race-conditions/multi-endpoint.mddoc · 2,658 bytes
reference/scenarios/race-conditions/partial-construction.mddoc · 2,689 bytes
reference/scenarios/race-conditions/rate-limit-bypass.mddoc · 2,558 bytes
reference/scenarios/race-conditions/single-endpoint-collision.mddoc · 2,413 bytes
reference/scenarios/race-conditions/timestamp-collision.mddoc · 2,510 bytes
reference/scenarios/race-conditions/toctou-session.mddoc · 5,316 bytes
reference/web-app-logic-principles.mddoc · 7,027 bytes
reference/web-cache-deception-resources.mddoc · 4,143 bytes
reference/web-cache-poisoning-resources.mddoc · 4,919 bytes

Read excerpt


# Web Application Logic

Test for logic flaws and application-specific vulnerabilities that automated scanners miss.

## Techniques

| Type | Key Vectors |
|------|-------------|
| **Business Logic** | Workflow bypass, price manipulation, feature abuse |
| **Race Conditions** | TOCTOU, limit bypass, double-spend, parallel requests |
| **Access Control** | IDOR, horizontal/vertical privilege escalation, forced browsing |
| **Cache Poisoning** | Unkeyed headers/parameters, fat GET, response splitting |
| **Cache Deception** | Path confusion, static extension tricks, normalization |
| **Info Disclosure** | Error messages, debug endpoints, source code, metadata |