我的随笔

Business logic vulnerabilities业务逻辑漏洞

Zeker62 2021-08-20 20:47 阅读:331 评论:0 推荐:0

Lab: Infinite money logic flaw：无现金钱逻辑漏洞

Zeker62 2021-08-20 20:31 阅读:377 评论:0 推荐:0

Lab: Flawed enforcement of business rules：业务规则执行漏洞

Zeker62 2021-08-20 19:44 阅读:148 评论:0 推荐:0

Lab: Authentication bypass via flawed state machine：通过丢包绕过身份验证登录

Zeker62 2021-08-20 19:36 阅读:218 评论:0 推荐:0

Lab: Insufficient workflow validation：工作流程的验证不足

Zeker62 2021-08-20 19:21 阅读:150 评论:0 推荐:0

Lab: Weak isolation on dual-use endpoint：两个参数的弱隔离

Zeker62 2021-08-20 19:00 阅读:82 评论:0 推荐:0

Lab: Inconsistent security controls：不一致的安全控制

Zeker62 2021-08-20 18:50 阅读:238 评论:0 推荐:0

Lab: Inconsistent handling of exceptional input：对异常输入的处理不一致

Zeker62 2021-08-20 18:32 阅读:294 评论:0 推荐:0

Lab: Low-level logic flaw：低级逻辑缺陷

Zeker62 2021-08-20 17:03 阅读:333 评论:0 推荐:0

Lab: High-level logic vulnerability：高级逻辑漏洞——意外价格

Zeker62 2021-08-20 16:10 阅读:119 评论:0 推荐:0