--- title: "#business-logic articles | Hashnode" description: "Explore 16 articles tagged #business-logic on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/business-logic" --- Tag # #business-logic 16 posts · 0 followers [Arshad](https://hashnode.com/@arshadakl) · [Sep 5](https://hashnode.com/posts/how-a-profile-update-feature-could-drain-a-company-s-bank-account/6a9c5976d374389ef28f3114) ### [How a Profile Update Feature Could Drain a Company's Bank Account](https://blog.arshadakl.in/how-a-profile-update-feature-could-drain-a-company-s-bank-account?utm_source=hashnode&utm_medium=feed) How a simple profile update flaw let users change credits, abuse premium AI agents, and create costly exposure for the platform. 6 min read · [blog.arshadakl.in](https://blog.arshadakl.in/how-a-profile-update-feature-could-drain-a-company-s-bank-account?utm_source=hashnode&utm_medium=feed) [Wasinjesu Osoko](https://hashnode.com/@uniquedeveloper) · [Aug 12](https://hashnode.com/posts/building-products-businesses-actually-pay-for-domain-driven-design-in-practice/6a7ced952635a8c5fcb2f19c) ### [Building Products Businesses Actually Pay For: Domain-Driven Design in Practice](https://wasinjesu-osoko.hashnode.dev/building-products-businesses-actually-pay-for-domain-driven-design-in-practice?utm_source=hashnode&utm_medium=feed) Learn how to use Domain-Driven Design (DDD) and TypeScript aggregates to write production code that enforces real-world business logic. 3 min read · [wasinjesu-osoko.hashnode.dev](https://wasinjesu-osoko.hashnode.dev/building-products-businesses-actually-pay-for-domain-driven-design-in-practice?utm_source=hashnode&utm_medium=feed) [Daniel Isaac E](https://hashnode.com/@Daniel-Isaac-E) · [Jul 8](https://hashnode.com/posts/business-logic-vulnerabilities-the-attack-surface-automated-scanners-can-t-find/6a4df5ddddc313176e200b0c) ### [Business Logic Vulnerabilities: The Attack Surface Automated Scanners Can't Find](https://danielisaace.hashnode.dev/business-logic-vulnerabilities-the-attack-surface-automated-scanners-can-t-find?utm_source=hashnode&utm_medium=feed) Introduction Modern application security tools have become incredibly effective at identifying common vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), Server-Side Request Forgery (SS 4 min read · [danielisaace.hashnode.dev](https://danielisaace.hashnode.dev/business-logic-vulnerabilities-the-attack-surface-automated-scanners-can-t-find?utm_source=hashnode&utm_medium=feed) [shemkar](https://hashnode.com/@shemkar) · [Apr 26](https://hashnode.com/posts/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate/69ee7c173d6a492cdd4ecfcd) ### [One Extra JSON Key: How a Harmless Profile Endpoint Became an ATO Candidate](https://shemkar.hashnode.dev/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate?utm_source=hashnode&utm_medium=feed) A real bug bounty lesson about mass assignment, impact proof, and learning from weak reports. 6 min read · [shemkar.hashnode.dev](https://shemkar.hashnode.dev/one-extra-json-key-how-a-harmless-profile-endpoint-became-an-ato-candidate?utm_source=hashnode&utm_medium=feed) [APIVerve Team](https://hashnode.com/@apiverve) · [Mar 16](https://hashnode.com/posts/business-day-math-is-harder-than-you-think/69b82b1b5abfe28cbe2aedf7) ### [Business Day Math Is Harder Than You Think](https://apiverve.hashnode.dev/business-day-math-is-harder-than-you-think?utm_source=hashnode&utm_medium=feed) Quick: how many business days are in March 2026? If you answered 22, you skipped weekends but forgot that different countries have different holidays in March. The US doesn't have a federal holiday in March, so 22 is correct there. But India celebrat... 6 min read · [apiverve.hashnode.dev](https://apiverve.hashnode.dev/business-day-math-is-harder-than-you-think?utm_source=hashnode&utm_medium=feed) [Zeeshan M.](https://hashnode.com/@zsec) · [Jan 16](https://hashnode.com/posts/reverse-account-takeover-via-email-rebinding-causing-forced-privilege-de-escalation/696ab35224912286fc40f0dc) ### [Reverse Account Takeover via Email Rebinding Causing Forced Privilege De-Escalation](https://z-sec.co/reverse-account-takeover-via-email-rebinding-causing-forced-privilege-de-escalation?utm_source=hashnode&utm_medium=feed) A critical SaaS vulnerability where email rebinding enables reverse account takeover, forcing workspace owner privilege de-escalation. 4 min read · [z-sec.co](https://z-sec.co/reverse-account-takeover-via-email-rebinding-causing-forced-privilege-de-escalation?utm_source=hashnode&utm_medium=feed) [Ganesh Rama Hegde](https://hashnode.com/@hegde10122) · [Nov 2, 2025](https://hashnode.com/posts/chapter-15-coding-the-searchimageusecase-domain-layer/69071f36b98671b7b9ccc55f) ### [Chapter 15 - Coding the SearchImageUseCase (Domain layer)](https://androidavatar.hashnode.dev/chapter-15-coding-the-searchimageusecase-domain-layer?utm_source=hashnode&utm_medium=feed) Before we start working on the same blueprint we used earlier for the GetArtUseCase, let us pause for a moment and depict the data flow in the form of a flowchart. This will help gauge the progress of the second use case - SearchImageUseCase. This us... 4 min read · [androidavatar.hashnode.dev](https://androidavatar.hashnode.dev/chapter-15-coding-the-searchimageusecase-domain-layer?utm_source=hashnode&utm_medium=feed) [amin Ouji](https://hashnode.com/@amin182) · [Sep 15, 2025](https://hashnode.com/posts/how-i-broke-saas-economics-bypassing-seat-limits-with-a-race-condition/68c84a0e1edc926bc88b8833) ### [How I Broke SaaS Economics: Bypassing Seat Limits With a Race Condition](https://hunteramine.hashnode.dev/how-i-broke-saas-economics-bypassing-seat-limits-with-a-race-condition?utm_source=hashnode&utm_medium=feed) There’s something deeply satisfying about breaking things that are supposed to be “hard limits.” Especially when those limits are the foundation of a SaaS business model. During a recent penetration test, I discovered a critical race condition in a p... 3 min read · [hunteramine.hashnode.dev](https://hunteramine.hashnode.dev/how-i-broke-saas-economics-bypassing-seat-limits-with-a-race-condition?utm_source=hashnode&utm_medium=feed) [amin Ouji](https://hashnode.com/@amin182) · [Sep 14, 2025](https://hashnode.com/posts/how-i-bypassed-a-client-side-limit-and-earned-a-bounty/68c71cdede45026f54f70c66) ### [How I Bypassed a Client-Side Limit and Earned a $$$$ Bounty](https://hunteramine.hashnode.dev/how-i-bypassed-a-client-side-limit-and-earned-a-bounty?utm_source=hashnode&utm_medium=feed) Introduction Hello everyone! Today, I’m sharing a story about a business logic vulnerability I found in the checkout flow of a major professional networking platform (let’s call it “example.com” to comply with disclosure rules). This bug allowed me t... 3 min read · [hunteramine.hashnode.dev](https://hunteramine.hashnode.dev/how-i-bypassed-a-client-side-limit-and-earned-a-bounty?utm_source=hashnode&utm_medium=feed) [Ahmed Ramy](https://hashnode.com/@aramy) · [Dec 27, 2024](https://hashnode.com/posts/patterns-command-siri/676e945a9910d9ce08fe0013) ### [Patterns: Command + Siri](https://blog.ahmedramy.me/patterns-command-siri?utm_source=hashnode&utm_medium=feed) How Command Pattern can be easily translated to Siri features 7 min read · [blog.ahmedramy.me](https://blog.ahmedramy.me/patterns-command-siri?utm_source=hashnode&utm_medium=feed)