Logic Bypass Detection

Detection Workflow

1. Identify security controls: Find authentication mechanisms, authorization checks, validation functions, business logic rules
2. Trace control flow: Use xrefs_to to trace paths, identify bypass opportunities, check for missing checks
3. Check validation logic: Review validation functions, test bypass scenarios, assess validation completeness
4. Assess bypass impact: What security control is bypassed? What's the business impact? How severe is the bypass?

Key Patterns

• Authentication bypass: weak password checks, session token weaknesses, timing attacks
• Authorization bypass: missing permission checks, insecure direct object references, privilege escalation
• Input validation bypass: blacklist-based validation, insufficient sanitization, regex bypass
• Business logic bypass: race conditions, state manipulation, transaction abuse

Output Format

Report with: id, type, subtype, severity, confidence, location, vulnerability, security control, bypass method, attack scenario, bypass steps, exploitability, impact, mitigation.