coupon_abuse_test
Test coupon stacking and alternation to identify discount bypass vulnerabilities in e-commerce systems by applying coupons individually and in alternating sequences.
Instructions
Test coupon stacking and alternation bypass.
Tests each coupon individually, then alternates between coupons to see if discounts compound past the intended limit.
Returns: {"individual_results": [...], "stacking_results": [...], "stacking_possible": bool}.
Side effects: Applies coupons to the cart. May modify cart totals.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Coupon application endpoint URL | |
| coupon_endpoint | Yes | Full URL for applying coupons, e.g. https://target/cart/coupon | |
| coupons | Yes | Coupon codes to test, e.g. ['NEWCUST5', 'SIGNUP30', 'FREESHIP'] | |
| coupon_param | No | Form parameter name for the coupon code | |
| auth_cookie | No | Session cookie for authenticated requests | |
| stacking_rounds | No | Number of alternation rounds to test for coupon stacking |