Web pentester prompt: add business-logic abuse backlog section #380

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

CristiVlad25 wants to merge 1 commit into aliasrobotics:main from CristiVlad25:add-business-logic-tests

Contributor

CristiVlad25 commented Dec 17, 2025

Summary:

Add a new “Business-Logic Abuse Backlog (10-15 app-specific test vectors)” section to the Web Pentester system prompt.
Instructs the agent to generate app-specific, observed-flow abuse tests (state skips, replay, race, entitlement bypass) to drive focused validation.

Why:

Business-logic vulns are app-specific and high-impact; this prompts consistent, structured discovery of abuse vectors after initial navigation.

Testing:

N/A (prompt-only change)

Notes:

Non-destructive by default; escalates to asking before irreversible-impact tests.


          added business logic tests abuse suggestions

25e4e54

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet