Business Logic Vulnerabilities

Recursos cross-platform para Business Logic Vulnerabilities: máquinas HTB, labs PortSwigger y rooms TryHackMe curados, con writeups validados y skills relacionadas.

Esta página agrega los recursos para practicar Business Logic Vulnerabilities de forma cross-platform: máquinas retiradas de Hack The Box, labs de PortSwigger Web Security Academy y rooms de TryHackMe, más recursos curados (HackTricks, PortSwigger, etc.) y skills relacionadas.

Cobertura: 12 retos en 1 plataforma — 12 PortSwigger. 0 con writeup en español, 0 con writeup en vídeo.

​

Por dónde empezar

Ordenado por dificultad real. A igual nivel, primero el lab aislado, después la room guiada y por último la máquina completa.

1. PortSwigger — Bypassing access controls using email address parsing discrepancies (Apprentice) · 🇬🇧
2. PortSwigger — Excessive trust in client-side controls (Apprentice) · 🇬🇧
3. PortSwigger — Flawed enforcement of business rules (Apprentice) · 🇬🇧
4. PortSwigger — High-level logic vulnerability (Apprentice) · 🇬🇧
5. PortSwigger — Inconsistent security controls (Apprentice) · 🇬🇧
6. PortSwigger — Authentication bypass via encryption oracle (Practitioner) · 🇬🇧

​

Recursos curados

Fuente	Enlace
PortSwigger	https://portswigger.net/web-security/logic-flaws

​

Labs PortSwigger que practican Business Logic Vulnerabilities (12)

Lab	Dificultad	Topic	Oficial
Bypassing access controls using email address parsing discrepancies	APPRENTICE	Business Logic Vulnerabilities	Abrir
Excessive trust in client-side controls	APPRENTICE	Business Logic Vulnerabilities	Abrir
Flawed enforcement of business rules	APPRENTICE	Business Logic Vulnerabilities	Abrir
High-level logic vulnerability	APPRENTICE	Business Logic Vulnerabilities	Abrir
Inconsistent security controls	APPRENTICE	Business Logic Vulnerabilities	Abrir
Authentication bypass via encryption oracle	PRACTITIONER	Business Logic Vulnerabilities	Abrir
Authentication bypass via flawed state machine	PRACTITIONER	Business Logic Vulnerabilities	Abrir
Inconsistent handling of exceptional input	PRACTITIONER	Business Logic Vulnerabilities	Abrir
Infinite money logic flaw	PRACTITIONER	Business Logic Vulnerabilities	Abrir
Insufficient workflow validation	PRACTITIONER	Business Logic Vulnerabilities	Abrir
Low-level logic flaw	PRACTITIONER	Business Logic Vulnerabilities	Abrir
Weak isolation on dual-use endpoint	PRACTITIONER	Business Logic Vulnerabilities	Abrir

---

← Volver al glosario completo

Última actualización: 2026-08-17