domains / families / security / race-condition

race-condition

separate

Race condition and TOCTOU testing for web apps. Use when testing one-time operations, concurrent HTTP abuse, rate-limit bypass, Turbo Intruder gates, HTTP/2 single-packet attacks, and CWE-362-style synchronization gaps.

When to use

• one-time operations
• concurrent HTTP abuse
• rate-limit bypass
• Turbo Intruder gates
• HTTP/2 single-packet attacks
• CWE-362-style synchronization gaps
• TOCTOU testing
• non-atomic read-then-write testing

When not to use

• unauthorized testing

Skill page

Source