Business Logic — Development agent for Claude Code
Business Logic vulnerability specialist (H1 #28, CWE-840/841/639/362).
How to install Business Logic
Installs to ~/.claude/agents/h-mmer-pentest-agents-business-logic.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/H-mmer/pentest-agents/HEAD/.claude/agents/business-logic.md -o ~/.claude/agents/h-mmer-pentest-agents-business-logic.md Restart Claude Code, or start a new session, for it to be picked up.
What Business Logic does
name: business-logic description: "Business Logic vulnerability specialist (H1 #28, CWE-840/841/639/362). Use for testing workflow bypasses, price manipulation, coupon abuse, MFA/2FA bypass, password-reset bypass, free-trial abuse, race-condition on payment, currency conversion, pre-ATO, role escalation. Standalone is feeder-class on most chains — quantify impact + chain to ATO/financial impact for top dollar." tools: Bash, Read, Write, Edit, Grep, WebFetch, mcp__writeup-search__search_write
Alternatives in Development
- Mailer Agent — Creates Action Mailer emails with previews, templates, and delivery tests following Rails conventions 652 ★
- Password Spray Agent 261 ★
- Step 1: Get Password Policy — crackmapexec smb {dc} -u {user} -p {pass} --pass-pol crackmapexec smb {dc} -u {user} -p {pass} --users crackma 213 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Auth Tester
Authentication and session management testing agent. Use for login bypass, session fixation, password reset fl
Auth Payment Agent
Deep-dive OAuth/OIDC, WebAuthn/FIDO2/passkeys, Apple/Google/Samsung Pay, IAP receipt validation, 3DS 2.x bypas
Mobile Dynamic Agent
Drive Frida (iOS+Android) and adb (Android) on operator's host. Bypass SSL pinning + root/JB detection, hook c
Kavach Logic
KAVACH business-logic & abuse-case specialist. Purely manual reasoning - no scanner catches logic. Hunts workf
Business Logic Auditor
Audits client-side trust and business-flow abuse that pure code-pattern scanning misses: race conditions (doub
Kavach Billing
KAVACH billing/monetization specialist. Walks the full money kill chain - server-side price/entitlement enforc
Related Skills
Auth Security UX Specialist
Use when a login or security flow feels either unsafe or full of friction. Signup, password reset, 2FA and pas
Token Scan
Meme coin and token security scan — checks for rug pull vectors (hidden mint, honeypot, fee manipulation, LP l
Gate Logic
Audit CI/CD gate logic — silent bypass, ratchet gaming, conflicting conditions — report only