Concurrent requests for "Low-level logic flaw".
作者在处理PortSwigger的业务逻辑漏洞时,尝试通过大量发送数据包来触发价格溢出现象。他计算了所需的数据包数量,并设置了高并发请求。然而,在操作过程中页面显示负数结果,这让他感到困惑并寻求帮助。 2025-7-1 02:16:9 Author: www.reddit.com(查看原文) 阅读量:13 收藏

Hello,

While working on the Low-level logic flaw in PortSwigger's business logic vulnerabilities, I needed to overflow the product price. To observe this phenomenon, I performed the following calculations:

The maximum integer is 2,147,483,647, and a jacket costs 1337 yuan. The current total amount of goods is already 1337, so an additional 2,147,482,310 is needed, requiring 1,606,194 leather jackets. I can add 99 jackets in one packet, so 16,224 packets are needed. Therefore, I set the repeat packet count to 16,224 with a concurrency of 100. Strangely, during the packet sending process, I refreshed the page and saw negative numbers. Why? It should be approaching the maximum integer.

The calculated number of packets sent is conservatively estimated, and even after sending all, it won't reach the maximum integer. Therefore, during operation, it should remain at a number that hasn't reached the total price. The appearance of a negative number here is something I don't understand.

If you can help me, I'd be grateful


文章来源: https://www.reddit.com/r/HowToHack/comments/1loq4ae/concurrent_requests_for_lowlevel_logic_flaw/
如有侵权请联系:admin#unsafe.sh