pentester.land· Apr 30, 2021· by Pentagrid (@pentagridsec)

Password reset code brute-force vulnerability in AWS Cognito

Target Program: AWS

🎯 Vulnerability: Remote Code Execution (RCE)

💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.

#Password reset#Bruteforce#Rate limiting bypass#Account takeover