Abhinav Pandrate / Security case study

Checkout race condition

Found a time-of-check/time-of-use (TOCTOU) issue in a Shopify checkout flow.

What I built

• Found a time-of-check/time-of-use issue in a Shopify checkout flow

More work

• Network design: Multi-subnet network designed and built in Cisco Packet Tracer
• Phishing simulation: A Gophish campaign in a lab, from landing page to tracking
• Checkout race condition: A time-of-check/time-of-use issue in a Shopify checkout flow
• Wargames & labs: OverTheWire, TryHackMe and PortSwigger Web Security Academy
• Charlie Oven store: Running the Shopify store for a British outdoor oven maker
• Charlie Oven HQ: Internal operations panel for orders, shipping and factory paperwork
• 3D kitchen configurator: Plan an outdoor kitchen in 3D, then buy it on Shopify
• Stockist: B2B wholesale app for Shopify
• STYRKR CEL50 promo: A Shopify Function in place of native discounts
• STYRKR ERP & automation: NetSuite through Celigo, plus n8n for staff on- and offboarding