webmedium

Race Shop 2

web-kids20

Task: Web shop with money transfer feature and limited starting balance. Solution: Exploit TOCTOU race condition by sending simultaneous transfer requests from multiple sessions to accumulate more money than legitimately possible.

$ ls tags/ techniques/
race_condition_exploitationconcurrent_requestsdouble_spending

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]