Scribd Logo
Upload

Welcome to Scribd!

  • 22 views

    Business Logic Bypass

    Uploaded by

    Shitesh Sachan
    The document discusses different types of business logic bypasses including business logic failure, role level bypass, server side validation issues, and privilege escalation. It also mentions the ability to modify or access data that a user should not have access to.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Business Logic Bypass

    Uploaded by

    Shitesh Sachan
    22 views1 page
    The document discusses different types of business logic bypasses including business logic failure, role level bypass, server side validation issues, and privilege escalation. It also mentions the ability to modify or access data that a user should not have access to.

    Original Description:

    Privilege Escalation inDepth Flow

    Original Title

    Business Logic Bypass (1)

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document discusses different types of business logic bypasses including business logic failure, role level bypass, server side validation issues, and privilege escalation. It also mentions the ability to modify or access data that a user should not have access to.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    22 views1 page

    Business Logic Bypass

    Uploaded by

    Shitesh Sachan
    The document discusses different types of business logic bypasses including business logic failure, role level bypass, server side validation issues, and privilege escalation. It also mentions the ability to modify or access data that a user should not have access to.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 1

    BUSINESS LOGIC BYPASS

    Examples are mentioned with


    every box

    Business
    logic Failure

    If Broker is able to perform


    super Broker Functionality
    If a right was never exist
    and Employer
    is able to perform that functionality

    If Client side validation is not in


    sync with server side

    Role Level
    Bypass

    Business logic
    break
    Server side
    validation
    Privilege
    Escalation

    Decision
    If Employer is able to modify his
    data for which earlier he has access but not right now
    If Employer is able to
    see/modify Broker Data

    If Employer is able to
    see/modify other
    Employer Data

    Horizontal
    Vertical

    Self

    You might also like