Logic Bypass Detection
Detection Workflow
- Identify security controls: Find authentication mechanisms, authorization checks, validation functions, business logic rules
- Trace control flow: Use
xrefs_to to trace paths, identify bypass opportunities, check for missing checks
- Check validation logic: Review validation functions, test bypass scenarios, assess validation completeness
- Assess bypass impact: What security control is bypassed? What's the business impact? How severe is the bypass?
Key Patterns
- Authentication bypass: weak password checks, session token weaknesses, timing attacks
- Authorization bypass: missing permission checks, insecure direct object references, privilege escalation
- Input validation bypass: blacklist-based validation, insufficient sanitization, regex bypass
- Business logic bypass: race conditions, state manipulation, transaction abuse
Output Format
Report with: id, type, subtype, severity, confidence, location, vulnerability, security control, bypass method, attack scenario, bypass steps, exploitability, impact, mitigation.
Severity Guidelines
- CRITICAL: Complete bypass of primary security control
- HIGH: Bypass of important security control
- MEDIUM: Partial bypass or edge case bypass
- LOW: Limited bypass with minor impact
See Also
patterns.md - Detailed detection patterns and exploitation scenariosexamples.md - Example analysis cases and code samplesreferences.md - CWE references and mitigation strategies
1---2name: detecting-logic-bypass3description: Detects logic bypass vulnerabilities including authentication bypass, authorization bypass, and business logic flaws. Use when analyzing authentication mechanisms, access controls, or investigating security control bypasses.4---5
6# Logic Bypass Detection
7
8## Detection Workflow
9
101. **Identify security controls**: Find authentication mechanisms, authorization checks, validation functions, business logic rules
112. **Trace control flow**: Use `xrefs_to` to trace paths, identify bypass opportunities, check for missing checks
123. **Check validation logic**: Review validation functions, test bypass scenarios, assess validation completeness
134. **Assess bypass impact**: What security control is bypassed? What's the business impact? How severe is the bypass?
14
15## Key Patterns
16
17- Authentication bypass: weak password checks, session token weaknesses, timing attacks
18- Authorization bypass: missing permission checks, insecure direct object references, privilege escalation
19- Input validation bypass: blacklist-based validation, insufficient sanitization, regex bypass
20- Business logic bypass: race conditions, state manipulation, transaction abuse
21
22## Output Format
23
24Report with: id, type, subtype, severity, confidence, location, vulnerability, security control, bypass method, attack scenario, bypass steps, exploitability, impact, mitigation.
25
26## Severity Guidelines
27
28- **CRITICAL**: Complete bypass of primary security control
29- **HIGH**: Bypass of important security control
30- **MEDIUM**: Partial bypass or edge case bypass
31- **LOW**: Limited bypass with minor impact
32
33## See Also
34
35- `patterns.md` - Detailed detection patterns and exploitation scenarios
36- `examples.md` - Example analysis cases and code samples
37- `references.md` - CWE references and mitigation strategies
aibot88