In this chapter, we will cover the following recipes:

• Testing business logic data validation
• Unrestricted file upload – bypassing weak validation
• Performing process-timing attacks
• Testing for the circumvention of workflows
• Uploading malicious files – polyglots