Logic flaws are always fun to detect. Many applications are prone to this because of single-sign-on, web2.0 ajax libraries and api stuff.

Logic is where web-scanner stops and human starts ;)