Back to directory

WRITEUP #593

How I was able to takeover any account (Zero-click ATO)

Auth BypassAccount takeoverAmazon cognito misconfiguration

by@m4dm0e(Mohammed Al-Barbari)

Program

-

Published

Jan 6, 2024

Added to HackDex

Jan 8, 2024

Read Full Writeuphttps://m4dm0e.github.io/blog/2023/01/06/cognito-misconfig.html

▸ RELATED WRITEUPS

Interesting Story of an Account Takeover Vulnerability

Auth BypassAccount takeover

Instagram and Meta 2FA Bypass by Unprotected Backup Code Retrieval in Accounts Center

Auth Bypass2FA / MFA bypass

Forced SSO Session Fixation

Account takeover on 8 years old public program

Auth BypassAccount takeover

$500 for Cracking Invitation Code For Unauthorized Access & Account Takeover

Auth BypassAccount takeover

Built with ❤️ by Shubham Rawat