Write-ups

Check The Published Writeups

Reset
WDBTitleTagsProgramsAuthorsTypePublicationAdded
1536I Obtained ADMIN access via the Account Activation link [In 30 seconds] Privilege escalation Amazon cognito misconfiguration NA popalltheshells Bug Bounty2022-05-202023-06-13
1243Amazon Cognito misconfiguration lead to account takeover Account takeover NA Hossam Ahmed (@iknowhatodo0x01) Bug Bounty2022-08-122023-06-13
962Fall account takeover via Amazon Cognito misconfiguration IDOR Account takeover NA Hossam Ahmed (@iknowhatodo0x01) Bug Bounty2022-10-132023-06-13
638Account Takeover Due to Cognito Misconfiguration Earns Me €xxxx Amazon cognito misconfiguration Account takeover NA Mukund Bhuva (@MukundBhuva) Bug Bounty2022-12-292023-06-13
587Account Take Over Due To AWS Cognito Misconfiguration Amazon cognito misconfiguration Account takeover NA Deshine Bug Bounty2023-01-162023-06-13
565AWS Cognito pitfalls: Default settings attackers love (and you should know about) Amazon cognito misconfiguration NA Lorenzo Vogelsang (@ptrac3) Bug Bounty2023-01-192023-06-13
190Multiple Critical Vulnerabilities In Strapi Versions <=4.7.1 Authentication bypass SSTI RCE Amazon cognito misconfiguration Information disclosure Strapi GhostCcamm (@GhostCcamm) Bug Bounty2023-04-172023-06-13
124Privilege Escalations through Integrations Privilege escalation Amazon cognito misconfiguration JWT Account takeover NA Colin McQueen Bug Bounty2023-05-042023-06-13