Mastering Kali Linux for Web Penetration Testing

Reaching your functional limits

Some web applications need to limit the number of times a transaction is executed or the number of times a function is called per workflow. As discussed in the cashing in with e-commerce section earlier in this chapter, poorly executed shopping carts have been seen to accept multiple applications of the same discount coupon. Airfare sites may seek to limit tickets purchased to a one-time transaction, but there have been instances where duplicate ticket orders have been purchased under the same one-time transaction cost, thereby circumventing proper charges.

Some applications will forgo their own workflows for integration with proven third parties, especially in transaction integration with services such as ...