Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Hunting for Amazon Cognito Security Misconfigurations

NahamSec via YouTube

Start learning Write review
Coursera Ad

Learn AI, Data Science & Business — Earn Certificates That Get You Hired

Learn More → Boot.dev Ad

The Most Addictive Python and SQL Courses

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This course examines how to identify Amazon Cognito security misconfigurations and their consequences, including unauthorized AWS access, authentication bypass, privilege escalation, and email attribute manipulation. It concludes with recommendations for developers.

Syllabus

Intro
Introduction to AWS Cognito
How to tell if an application is using Amazon Cognito?
Unauthorized access to AWS services due to Liberal AWS Credentials
Authentication bypass due to enabled Signup API action
Privilege escalation through writable user attributes
Security misconfiguration #4: Updating email attribute before verification
Recommendations for developers

Taught by

NahamSec

Reviews

Start your review of Hunting for Amazon Cognito Security Misconfigurations

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.