Bypass Cognito Account Enumeration Controls - Hacking The Cloud
hackingthe.cloud
Leverage a flaw in Cognito's API to enumerate accounts in User Pools.

Bypass Cognito Account Enumeration Controls::Leverage a flaw in Cognito’s API to enumerate accounts in User Pools.