Race Conditions

Race conditions stem from simple programming mistakes developers often make. A race condition happens when two sections of code that are designed to be eecuted in a sequence get executed out of sequence.

Hunt for Race Conditions

1. Spot the features prone to race conditions in the target application and copy the corresponding requests.
2. Send multiple of these critical requests to the server simultaneously. You should craft requests that should be allowed once but not allowed multiple times.
3. Check the results to see if your attack has succeeded. Any try to execute the attack multiple times to maximize the chance of success.
4. Consider the impact of the race condition you just found.