W-RACE-SPImpact

Single-Packet Race Condition

Bundle multiple HTTP/2 requests into a single TCP packet to hit the server within nanoseconds — bypass coupon limits, gift-card stacking, OTP brute.

§ Where this technique fits

W-RACE-SP is catalogued under the Impact tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 3 on average.

§ Dossiers chaining this technique

Single-packet race → coupon stacking
Coupon redemption check happens before the apply step. Send 20 redemptions in a single TCP packet — the app validates each in parallel and applies all of them.
step 3 / 5

§ What commonly comes next

01
Business Logic Flaw
W-BUSINESS-LOGIC · Impact
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

Single-packet race → coupon stacking

§ What commonly comes next