core

var BusinessLogicPatterns = []Pattern{
	{
		Name:        "Time-of-check Time-of-use (TOCTOU)",
		Description: "Race condition between validation and use",
		Category:    "Race Condition",
		Severity:    "HIGH",
		Test:        testTOCTOU,
	},
	{
		Name:        "Integer Overflow in Calculations",
		Description: "Integer overflow leading to unexpected behavior",
		Category:    "Value Manipulation",
		Severity:    "MEDIUM",
		Test:        testIntegerOverflow,
	},
	{
		Name:        "Race Condition in Resource Allocation",
		Description: "Concurrent access to limited resources",
		Category:    "Race Condition",
		Severity:    "HIGH",
		Test:        testResourceRace,
	},
	{
		Name:        "State Machine Manipulation",
		Description: "Unauthorized state transitions",
		Category:    "State Management",
		Severity:    "HIGH",
		Test:        testStateMachine,
	},
	{
		Name:        "Inconsistent State Validation",
		Description: "Different validation rules across states",
		Category:    "Validation",
		Severity:    "MEDIUM",
		Test:        testInconsistentValidation,
	},
	{
		Name:        "Privilege Escalation Through Workflow",
		Description: "Gaining higher privileges through workflow manipulation",
		Category:    "Authorization",
		Severity:    "CRITICAL",
		Test:        testWorkflowPrivilegeEscalation,
	},
	{
		Name:        "Business Logic Bypass",
		Description: "Bypassing business rules and constraints",
		Category:    "Business Logic",
		Severity:    "HIGH",
		Test:        testBusinessLogicBypass,
	},
}

var HighValueLogicTests = []logic.TestCase{
	{
		Name:        "Password Reset Token Hijack",
		Description: "Account takeover via host header injection in password reset",
		Category:    logic.CategoryAuthentication,
		Severity:    logic.SeverityCritical,
		Impact:      "Complete account takeover",
		Method:      "POST",
		Expected:    "Host header injection leads to token hijack",
		Remediation: "Validate Host header and use absolute URLs",
	},
	{
		Name:        "Race Condition in Payment Processing",
		Description: "Purchase items for free or reduced price via race condition",
		Category:    logic.CategoryPayment,
		Severity:    logic.SeverityCritical,
		Impact:      "Financial loss due to free purchases",
		Method:      "POST",
		Expected:    "Concurrent requests bypass payment validation",
		Remediation: "Implement proper synchronization for payment processing",
	},
	{
		Name:        "MFA Bypass via Recovery Flow",
		Description: "Complete MFA bypass leading to account takeover",
		Category:    logic.CategoryAuthentication,
		Severity:    logic.SeverityCritical,
		Impact:      "Account takeover bypassing MFA protection",
		Method:      "POST",
		Expected:    "Recovery flow bypasses MFA requirement",
		Remediation: "Ensure MFA is required for all sensitive operations",
	},
	{
		Name:        "IDOR in Password Reset",
		Description: "Reset any user's password via insecure direct object reference",
		Category:    logic.CategoryAuthorization,
		Severity:    logic.SeverityCritical,
		Impact:      "Mass account takeover",
		Method:      "POST",
		Expected:    "Password reset tokens not bound to specific users",
		Remediation: "Bind reset tokens to specific user accounts",
	},
	{
		Name:        "Shopping Cart Price Manipulation",
		Description: "Purchase items at arbitrary prices via parameter manipulation",
		Category:    logic.CategoryPayment,
		Severity:    logic.SeverityHigh,
		Impact:      "Financial loss due to price manipulation",
		Method:      "POST",
		Expected:    "Price parameters can be manipulated client-side",
		Remediation: "Validate all pricing server-side",
	},
	{
		Name:        "Workflow State Bypass",
		Description: "Skip payment or verification steps in multi-step processes",
		Category:    logic.CategoryWorkflow,
		Severity:    logic.SeverityHigh,
		Impact:      "Bypass of critical business logic controls",
		Method:      "GET/POST",
		Expected:    "Direct access to final states without completing prerequisites",
		Remediation: "Implement proper state validation and flow control",
	},
	{
		Name:        "Negative Quantity Logic Flaw",
		Description: "Add negative quantities to cart for credit/refund",
		Category:    logic.CategoryBusinessLogic,
		Severity:    logic.SeverityHigh,
		Impact:      "Financial loss due to negative pricing",
		Method:      "POST",
		Expected:    "Negative quantities result in negative total prices",
		Remediation: "Validate quantity inputs to ensure positive values",
	},
	{
		Name:        "Coupon Stacking Vulnerability",
		Description: "Apply multiple coupons or discounts beyond intended limits",
		Category:    logic.CategoryPayment,
		Severity:    logic.SeverityMedium,
		Impact:      "Financial loss due to excessive discounts",
		Method:      "POST",
		Expected:    "Multiple discount codes can be applied simultaneously",
		Remediation: "Implement proper coupon validation and limits",
	},
	{
		Name:        "Time-based Logic Manipulation",
		Description: "Manipulate timestamps to bypass time-based restrictions",
		Category:    logic.CategoryTemporal,
		Severity:    logic.SeverityMedium,
		Impact:      "Bypass of time-based business rules",
		Method:      "POST",
		Expected:    "Client-provided timestamps are trusted without validation",
		Remediation: "Use server-side timestamps for all time-based logic",
	},
	{
		Name:        "Session Fixation in Workflow",
		Description: "Fix user session during privilege escalation workflows",
		Category:    logic.CategoryAuthentication,
		Severity:    logic.SeverityHigh,
		Impact:      "Account takeover via session fixation",
		Method:      "GET/POST",
		Expected:    "Session ID remains same across privilege changes",
		Remediation: "Regenerate session IDs during privilege escalation",
	},
}