From 1350984c31a7e826c59643a9e36205a648e5c6aa Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?AL=C4=B0=20BAYKARA?= <100738107+alibaykara@users.noreply.github.com> Date: Tue, 4 Mar 2025 05:01:26 +0300 Subject: [PATCH] Update README.md --- Business-Logic/README.md | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/Business-Logic/README.md b/Business-Logic/README.md index d88b722..fa3368c 100644 --- a/Business-Logic/README.md +++ b/Business-Logic/README.md @@ -1,11 +1,16 @@ # Business Logic ## Business Logic References -https://owasp.org/www-pdf-archive/2008.07.17.OWASP.ppt.pdf +[https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/10-Business_Logic_Testing/README] +[https://portswigger.net/web-security/logic-flaws] + +[https://portswigger.net/web-security/logic-flaws/examples] + +wayback machine [https://web.archive.org/web/20221223002157/https://owasp.org/www-pdf-archive/2008.07.17.OWASP.ppt.pdf] ## Examples * [[2020] - [shopify] Takeover an account that doesn't have a Shopify ID and more](https://hackerone.com/reports/867513) * [[2020] - Change the username for any Facebook Page](https://bugreader.com/marcos@change-the-username-for-any-facebook-page-219) * [[2020] - Email Confirmation Bypass in your-store.myshopify.com which leads to privilege escalation](https://hackerone.com/reports/910300) -[[2020] - [Gitlab] Members from parent group keep their access level on a subgroup transfer and are invisible](https://hackerone.com/reports/790786) \ No newline at end of file +[[2020] - [Gitlab] Members from parent group keep their access level on a subgroup transfer and are invisible](https://hackerone.com/reports/790786)