BSCP

Burp Suite Certified Practitioner (BSCP)

Business Logic VulnerabilitiesEnglish
Exam overview

Practice session

A web application sends a WebSocket message `{"action":"purchase","amount":100}`. An attacker intercepts and changes `amount` to `-100`. The application processes the negative value and credits the attacker's account. This is an example of which vulnerability?

Loading your practice session…