Weihang Wang

Finding client-side business flow tampering vulnerabilities

2020

The sheer complexity of web applications leaves open a large attack surface of business logic. Particularly, in some scenarios, developers have to expose a portion of the logic to the client-side in order to coordinate …