Business Logic Bugs!! What is that?!!

-
 

Hi again, this topic is about something special it's about Business Logic errors Logical bugs what is this? we will know.

What is Business Logic?



It is how the data (which the website receives) created, stored and modified and this developed for you, let's take an example for that of checkout process:


  • the form which takes your address and information
  • the second form will take payment details
  • the payment will be processed
  • On successful transaction, the page will show congratulations

So know what is the Bugs or Error which will be in this?! let's give some example for that (this is not all of Bugs/Errors):

  • now I'm in an e-commerce store and I'm sopping and I choose a product  I add it to my car and I opened it to checkout and get the product but when I checkout I added a lower cost and the process will continue and get the product with low cost, another thing, if I can add the quantity on the cart I can try to add a half like that 0.5 if there is a bug you can get the product with 50% discount :*.
There is a lot of examples for this bug on the internet and these are 
piece of them:

What is the impact of Logical bugs?!

  • User Privilege Escalation
  • Access to Unauthorized Information
  • Identity Extraction
  • Manipulating Shopping Cart & Payment Systems
  • Getting More Discounts
  • Extending Subscription
  • Downloading Data of other Users
  • Bypass Security Restrictions
  • Denial of Service
why this bug is difficult to find?!

This bug can't be found using any scanners so it needs your work, your hand, and your brain to find it because the security scanners just find the vulnerabilities and scanners maybe can't understand the logical processes. Another thing the Firewalls can't detect the Business Logic Errors/Bugs because of these systems designed to detect malicious attacks like SQL injection, XSS, CSRF, and LFI. The last thing is that you should know your application very well to start to find logic bugs.

in the end, you should be creative and think out of the box on your Hunting or pen-testing, I hope this topic helped anyone, Happy Hacking :P.

see you soon, Goodbye.

Comments

Post a Comment

Popular posts from this blog

[BlackHatMEA-CTF 2024] cockatoo PWN challenge

-
Image
 ( بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ ) (إن أحسنت فمن الله، وإن أسأت فمن نفسي والشيطان) Let's check the "cockatoo" pwn challenge from Blackhat MEA CTF 2024. Reverse the Binary we note that the binary takes the input byte by byte and there is a counter (i hate static analysts) Dynamic analysis  Let's jump to GDB and see what happened. I set a breakpoint on the road to get the stack address in which our input will be stored, and the following screenshots show our input increase and the counter before the RIP address. and the payload to overwrite the counter and control where the next write will be in the following screenshots  and we added to the counter (16) and could overwrite the RIP now we have to find our gadgets and do a simple execve, right?!!! NOOOOOO Exploit we don't have gadgets for "rdx, rdi, rsi" and we need to do "execve(rdi, rsi, rdx)", but we have "syscall" and "pop rax" so its time for our SROP attack. we...
Read more

[WEB] ASC Wargame CTF 2024 - Challenge Hot Proxy

-
Image
 ( بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ ) (إن أحسنت فمن الله، وإن أسأت فمن نفسي والشيطان) It was a nice CTF, I got 2nd place with my guys: Hissien Misbah ( Twitter ) Mohamed Bebo ( Linkedin ) Sameh ( Linkedin ) Osama Zidan ( Linkedin ) A picture during solving this challenge in the last 5m of the CTF (thinking that we got 1st place). Let's walk through the Web Challenge Hot Proxy, note that we did not solve it during the time of the CTF it was a minute way, let's start. Note: there is no source code in the challenge attachment, I requested it from the author ( @serWazito0 ) thanks to him, challenges files ( ASCWG_2024_CTF ). Note: the flag file in the server and called "flag_<RANDOM>.txt", so we have to get RCE. From the title I know that there is an "SSRF" vulnerability in this challenge and from the description, we know that there is an internal application called "app1" with a route called "/secret" so our target is to access...
Read more

Lets Analysis STM32F103 Chip Firmware from Attify

-
Image
( بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيمِ ) Let's start our blog. As we know any IoT device should have a firmware to run it and there is a thought that it is secure by default because it is in a board, but we know that we can dump this firmware, our firmware know is already shared with us something like training to learn basics of reversing firmware. you can download the firmware from here . if we run the file command on the firmware we will find this "STM32F103C-firmware.bin: data" and if we try to get the architecture using binwalk it will return empty result "binwalk -A STM32F103C-firmware.bin" but we don't need this because it is a famous chip and we can know what we want from google. After searching for the chip name STM32F103C we will open its default page you will know that it run using "ARM Cortex M3" we will need that later, it is time to analysis using Ghidra. Analysis Dropping the firmware file to Ghidra but it will not detect anything...
Read more