W-BUSINESS-LOGICImpact

Business Logic Flaw

Workflow accepts states the designer never imagined — negative quantities, reordered steps, parameter tampering.

§ Where this technique fits

W-BUSINESS-LOGIC is catalogued under the Impact tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 2 on average.

§ Dossiers chaining this technique

Single-packet race → coupon stacking
Coupon redemption check happens before the apply step. Send 20 redemptions in a single TCP packet — the app validates each in parallel and applies all of them.
step 2 / 5

§ What commonly comes next

01
Exfiltration Over C2 Channel
T1041 · Exfiltration
seen 1×
02
Single-Packet Race Condition
W-RACE-SP · Impact
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

Single-packet race → coupon stacking

§ What commonly comes next