Web Application Manipulating the Checkout: A Masterclass in Business Logic Flaws
A Synack Red Team member discovered a cross-site scripting vulnerability in SAP Concur Open.
Home > Archives by Tubagus Fahrudiansyah
Tubagus Fahrudiansyah
Tubagus Fahrudiansyah is a security researcher on the Synack Red Team and a Synack Acropolis inductee, recognized for his work uncovering business logic vulnerabilities in production e-commerce systems. During a recent Synack engagement, he identified a critical desync between a payment gateway and its shopping cart that allowed attackers to finalize large orders for the price of a single low-cost item. He has also reported vulnerabilities through Google's Bug Hunters program.