Back to directory
WRITEUP #1675

AWS Cognito pitfalls: Default settings attackers love (and you should know about)

OtherAmazon cognito misconfiguration
by@ptrac3(Lorenzo Vogelsang)
Program
-
Published
Jan 19, 2023
Added to HackDex
Mar 10, 2023
Read Full Writeuphttps://www.secforce.com/blog/aws-cognito-pitfalls-default-settings-attackers-love-and-you-should-know-about/
▸ RELATED WRITEUPS
Data Theft in Salesforce: Manipulating Public Links
OtherSOQL injection
When Certificates Fail: A Story of Bypassed MFA in Remote Access
Other2FA / MFA bypass
SSTI in Bug Bounty Program: The Time I Played with Handlebars and Broke Stuff
OtherSSTI
Ghost In The Ppl Part 1: Byovdll
OtherUse-After-Free
Part 2: From Byovdll To Arbitrary Code Execution In Lsass
OtherUse-After-Free

Built with ❤️ by Shubham Rawat