---
title: "Discussion on \"Business Logic Flaws: When the bug is the behavior\" | Hashnode"
description: "Discussion on \"Business Logic Flaws: When the bug is the behavior\". From donation feature to infinite points glitch"
url: "https://hashnode.com/posts/business-logic-flaws-when-the-bug-is-the-behavior/6ab110c51a972732a9db878e"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Business Logic Flaws: When the bug is the behavior](https://blog.cain.tech/business-logic-flaws-when-the-bug-is-the-behavior?utm_source=hashnode&utm_medium=feed)

From donation feature to infinite points glitch

Sep 21 · 14 min read · blog.cain.tech  
Read the article

-   [#hacking](https://hashnode.com/tag/hacking)
-   [#logic-business-flaws](https://hashnode.com/tag/logic-business-flaws)
-   [#webhacking](https://hashnode.com/tag/webhacking)

## Written by

[Alejandro Baño](https://hashnode.com/@alexb616)

@alexb616 · Murcia, Spain - Prague, Czech Republic

  
[View profile](https://hashnode.com/@alexb616)

Offensive Security Engineer

Offensive security engineer with experience in external penetration testing, web applications, APIs, and Active Directory infrastructure. My research led me to discover new attack techniques and several assigned CVEs. I also have experience from the defensive side (Blue and Purple team operations), incident response, and adversary TTP simulation across SIEM and EDR platforms to improve detection coverage. I hold the OSEP, OSCP, BSCP, OSWP and CCFA certifications.

## Responses

Comments are turned off for this post.