Business Logic Vulnerabilities

Recursos cross-platform para Business Logic Vulnerabilities: máquinas HTB, labs PortSwigger y rooms TryHackMe curados, con writeups validados y skills relacionadas.

​

Business Logic Vulnerabilities

Esta página agrega los recursos para practicar Business Logic Vulnerabilities de forma cross-platform: máquinas retiradas de Hack The Box, labs de PortSwigger Web Security Academy y rooms de TryHackMe, más recursos curados (HackTricks, PortSwigger, etc.) y skills relacionadas.

​

Recursos curados

Fuente	Enlace
PortSwigger	https://portswigger.net/web-security/logic-flaws

​

Labs PortSwigger que practican Business Logic Vulnerabilities (12)

Lab	Dificultad	Topic	Oficial
Bypassing access controls using email address parsing discrepancies	APPRENTICE	Business Logic Vulnerabilities	Abrir
Excessive trust in client-side controls	APPRENTICE	Business Logic Vulnerabilities	Abrir
Flawed enforcement of business rules	APPRENTICE	Business Logic Vulnerabilities	Abrir
High-level logic vulnerability	APPRENTICE	Business Logic Vulnerabilities	Abrir
Inconsistent security controls	APPRENTICE	Business Logic Vulnerabilities	Abrir
Authentication bypass via encryption oracle	PRACTITIONER	Business Logic Vulnerabilities	Abrir
Authentication bypass via flawed state machine	PRACTITIONER	Business Logic Vulnerabilities	Abrir
Inconsistent handling of exceptional input	PRACTITIONER	Business Logic Vulnerabilities	Abrir
Infinite money logic flaw	PRACTITIONER	Business Logic Vulnerabilities	Abrir
Insufficient workflow validation	PRACTITIONER	Business Logic Vulnerabilities	Abrir
Low-level logic flaw	PRACTITIONER	Business Logic Vulnerabilities	Abrir
Weak isolation on dual-use endpoint	PRACTITIONER	Business Logic Vulnerabilities	Abrir

---

← Volver al glosario completo

Última actualización: 2026-05-08