Concurrency testing of logic vulnerabilities

  This article uses fiddler as a testing tool

  The main test scenarios of the concurrent test: check-in, earn points every day, etc. , test whether the server can respond multiple times by sending requests concurrently.

 

  Example: Testing concurrent check-ins

 

  1. Go to the corresponding page first, and then press F11 in fiddler to start intercepting packets.

   

  

  2. Click to sign in to trigger the request

   

  

  3. Copy the request, select the request package with the mouse, and press the r shortcut key to copy the request.

  

  4. Select all, click GO to send together

  

  5. View the response

  

 

  If all the responses are 200ok, check whether the page check-in score appears multiple times. If there are multiple times, the loophole exists.

 

 

 

 

 

 

 

If there is any mistake, please correct me in time, thank you!

 

Guess you like

Origin http://43.154.161.224:23101/article/api/json?id=325347536&siteId=291194637