Cybersecurity

Business Logic

Business logic / authentication bypass / privilege escalation — POST body field tampering (role/is_admin/user_type), 2FA bypass via response manipulation, predictable TOTP seeds, hidden authorization headers, multi-step workflow tampering. For challenges tagged business_logic, privilege_escalation, 2fa_bypass, or auth_bypass that aren't pure IDOR/JWT.

Publisher / source

BitterSecurity/Decepticon (found on GitHub top repositories)

Upstream record

BitterSecurity/Decepticon

Version

Version 1

Published

2026-11-04

Publication review

Approved for publication · recorded passed scan 2026-11-04

Content fingerprint

30bdc2c99d7241ace5e5c2da88f7e6408981997180bb9a3cfc25a802306db701