> For the complete documentation index, see [llms.txt](https://gowsundar.gitbook.io/book-of-bugbounty-tips/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gowsundar.gitbook.io/book-of-bugbounty-tips/application-logic-bypasses.md).

# Application Logic Bypasses

![](https://1889062997-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LbWrDBBrbM1WtGeIKRO%2F-MTJmXYuRbUyJjlWtJJQ%2F-MTJmfmZ4qVOgnYvcRPV%2Fimage.png?alt=media\&token=0f6cfacc-e690-4e95-b140-320225b2ff03)

* [GET /admin HTTP/1.1 Host: http://site.com ... Access is denied GET /test HTTP/1.1 Host: http://site.com X-Original-URL: /admin HTTP/1.1 200 OK](https://twitter.com/hunter0x7/status/1312110348841840640?s=20)