Assessing Business Logic
This chapter covers the basics of business logic testing, including an explanation of some of the more common tests performed in this area. Web penetration testing involves key assessments of business logic to determine how well the design of an application performs integrity checks, especially within sequential application function steps, and we will be learning how to use Burp Suite to perform such tests.
In this chapter, we will cover the following recipes:
- Testing business logic data validation
- Unrestricted file upload—bypassing weak validation
- Performing process-timing attacks
- Testing for the circumvention of workflows
- Uploading malicious files—polyglots
