Ideas for Testing Checkout Systems

Lopseg
4 min readDec 22, 2023

Enhanced Original Tests

  1. Increase in Installment Value: Test increasing the value of the installments parameter in the checkout request for extreme values such as 11000 or 11000.00.
  2. Discount and Free Shipping Handling: Add products to the cart until you get a free shipping discount, copy the value of the discounts/coupons parameter (if it exists), remove the products and finalize the purchase using the copied parameter .
  3. Modification of Payment Method: Attempt to modify the payment method to one that is not displayed by the user interface, in order to identify errors in server-side validation.
  4. Manipulation of Benefits of Discounted Products: Activate benefits of a discounted product, proceed to checkout, and in the meantime, send a request to remove the discounted item from the cart, then finalize the purchase .
  5. Negative Product Quantity: Send payment request with product quantity defined as a negative value.
  6. Negative Payment Amount: Trying to make a payment with a negative amount.
  7. Payment with Fractional Values: Send payment request with values less than 1 and greater than zero (ex: 0.01), testing vulnerabilities in processing fractional values.
  8. Atypical Data Injection into Payment Parameters: Test sending atypical values such as TRUE, NULL, {"__proto__":*/1/0/} in parameters such as discount, installments and payment details.

--

--

Lopseg
Lopseg

Written by Lopseg

Bachelor of Engineering in Computer Engineering, dedicated to exploring the depths of cybersecurity. Security researcher and avid bug bounty participant.

No responses yet