mitm-find-bizlogic
Installation
SKILL.md
Find Business Logic Vulnerabilities
Analyze the mitmproxy dump (log.txt) for business logic flaws for: $ARGUMENTS
Requires:
log.txtin the current directory. If it's missing, capture traffic first:mitmdump --set flow_detail=3 2>&1 | tee log.txt
High-Value Business Logic Patterns (from 376 real HackerOne bounty reports)
1. Payment/Pricing Manipulation
Real examples from bounties:
- Uber: paymentProfileUUID bypass for free rides
- Negative quantity for refund abuse
- Price manipulation in cart
- Coupon/promo code stacking
- Currency conversion abuse