Race Conditions & Concurrency Audit (offensive-race-condition)

Authorization & Scope Notice: This skill is part of the REA_Skill + claude-red Unified Security & Reverse Engineering Suite. It is designed strictly for authorized security assessments, defensive architecture reviews, vulnerability triage, bug bounty verification, and remediation engineering on software, infrastructure, and assets you own or have explicit permission to test.

Overview

Web race condition and concurrency vulnerability assessment covering time-of-check to time-of-use (TOCTOU) windows, HTTP/2 single-packet concurrent request testing, coupon/balance double-spending, rate-limit bypasses, and remediation via database row locking (SELECT FOR UPDATE), idempotency keys, and distributed locks.

Operational Workflow