Business Logic Flaw Assessment (offensive-business-logic)

Authorization & Scope Notice: This skill is part of the REA_Skill + claude-red Unified Security & Reverse Engineering Suite. It is designed strictly for authorized security assessments, defensive architecture reviews, vulnerability triage, bug bounty verification, and remediation engineering on software, infrastructure, and assets you own or have explicit permission to test.

Overview

Application business logic vulnerability assessment covering multi-step workflow state machine enforcement, numeric boundary/negative value manipulation, privilege/subscription tier validation, currency rounding discrepancies, and invariant verification. Use when auditing checkout, billing, and multi-stage workflows.

Operational Workflow