Security / Bug Hunt
Bug Hunt: GadgetKart Abuse Cases
Same checkout, adversary's mindset. Hunt the defects an abuser would weaponize: stacked discounts, accepted-expired cards, and free money.
- Difficulty
- Hard
- Format
- Bug Hunt
- Points
- 200
- Estimate
- 18 min
// MISSION BRIEF
Your Mission
You've walked a checkout before, now walk it as an abuser. GadgetKart's checkout has five defects; several are abuse cases a malicious user would exploit for free products or to bypass controls.
Abuse-case thinking:
- What happens if I do a money-affecting action many times?
- Can I pay with a card that should be rejected?
- Can I make the price go somewhere it shouldn't?
- Where does the UI's promise not match what's charged?
Use coupon SAVE10. Then abuse it.
// FIRST CONTACT
Battle teaser
An e-commerce checkout with cart quantities, discount codes, shipping options, and card payment.
Answers, scoring, hints, and the full battle stay sealed.
// SKILL TAGS
bug-huntsecuritybusiness-logicabuse-cases