writeups.xyz / How I was able to takeover any account (Zero-click ATO)

Submitter : c2a

Date: 6 January 2024

Bounty : undisclosed

Vulnerabilities :

• Account Takeover
• Amazon Cognito Misconfiguration

Programs :

• Undisclosed

Authors :

• Mohammed Al-Barbari (@M4dm0e)

Link :
https://m4dm0e.github.io/blog/2023/01/06/cognito-misconfig.html