writeups.xyz / ATO without any interaction [aws cognito misconfiguration]

Submitter : c2a

Date: 30 April 2022

Bounty : 550

Vulnerabilities :

• Account Takeover
• Lack of Rate Limiting

Programs :

• GitHub

Authors :

• Shreyaskoli (@SPY8OY)

Link :
https://shreyaskoli.medium.com/ato-without-any-interaction-aws-cognito-misconfiguration-d690f4b3da11