Full ATO (1 Click) via custom metadata manipulation in AWS Cognito Misconfigured Application
How i found critical ATO via new hidden AWS Cognito Misconfiguration
Aug 31, 20256 min read80
Pinned
Command Palette
Search for a command to run...
Latest articles
How I found 22 LFI in the same program using automation tricks
How automation tricks can be useful to escalate your findings from 1 to 22
Oct 20, 20245 min read43
How I got my first Logic Bug and how to find them
السلام عليكم Assalamualaikum, everyone! Let me introduce myself first ❤️ I’m Hazem El-Sayed (zoma), a Junior Computer Science student and an Offensive Security enthusiast. Currently, I’m hunting for bugs in Vulnerability Disclosure Programs (VDPs), a...
Oct 4, 20234 min read72