Find security gaps in multi-step business workflows.
What it does
Guides business-workflow security testing toward state transitions, timing gaps, and missing checks, with links to deeper testing skills.
When to use it
Use when suspected flaws involve races, workflow bypass, price manipulation, negative values, stacked discounts, or multi-step business processes rather than parser-level injection.
How to use it
Give it a business workflow to test; it maps states and one-time actions, checks timing and authorization gaps, and identifies related testing paths.
What you provide
- the workflow to test
What you need · 2
Routes API-dependent attack chains back to the corresponding router to complete the path; whether installation is required is unstated.
Routes upload- or object-permission-dependent attack chains back to the corresponding router to complete the path; whether installation is required is unstated.
Access · 0
No additional actions listed.