Business Logic Flaws: When the bug is the behavior
From donation feature to infinite points glitch
CAIN
CAIN is an offensive security blog. We document vulnerabilities in depth, research new techniques and attack vectors, and explore how AI can be applied to offensive security.
Written by Olivia Pace and Alejandro Baño.
Latest articles
One Click, No File: Upload XSS Without the Upload
How multipart/form-data turns "the victim has to pick a file" into a single link
HTTP Request Smuggling Part 4
Exploitation and Impact
HTTP Request Smuggling Part 3
How to Spot HTTP Request Smuggling
HTTP Request Smuggling Part 2
A Visual Guide to the Main Variants
HTTP Request Smuggling Part 1
Request Framing, Desynchronization, and Connection Reuse
