Hands-On Application Penetration Testing with Burp Suite
上QQ阅读APP看书,第一时间看更新

Various business logic flaws

Every application has its own set of logic to get some functions done. Business logic is generally a set of steps required to get a job completed. Let's take an example where, if a user wants to purchase a product on the shopping site, he have to follow a series of steps: 

  1. Select an item
  2. Specify the quantity of the product
  3. Enter delivery information
  4. Enter card details
  5. Complete payment gateway procedures
  6. Purchase complete
  7. Delivery pending
  8. Delivery complete

As you can see, a lot of steps are involved and this is where an automated scanner fails.