Question

Race conditions are one of the most interesting vulnerabilities in modern web applications. They stem from simple programming mistakes developers often make, and these mistakes have proved costly: attackers have used race conditions to steal money from online banks, e-commerce sites, stock brokerages, and cryptocurrency exchanges.

竞态条件是现代 Web 应用程序中最有趣的漏洞之一。它们源于开发人员常犯的简单编程错误，而这些错误已经被证明代价高昂：攻击者利用竞态条件从在线银行、电子商务网站、股票经纪公司和加密货币交易所窃取资金。

Let’s dive into how and why these vulnerabilities happen, and how you can find them and exploit them.

让我们深入了解这些漏洞是如何发生的，以及为什么会发生，以及您如何找到它们并利用它们。