Smashing the state machine: the true potential of web race conditions
For too long, web race condition attacks have focused on a tiny handful of scenarios. Their true potential has been masked thanks to tricky workflows, missing tooling, and simple network jitter hiding
United States Josip Franjkovi Natalie Silvanovich Web Web Security Academy Black Hat United States Turbo Intruder
Source: portswigger.net