AWS Cognito

An AWS Cognito bypass without a browser. Takion generates the cognitoAsfData token from the browser signals and the email you are logging in with, so your login request clears Cognito.

Check our example bundles in order to validate your implementation against our validate ones, with correct headers order, TLS and flow from our Github repo

What is AWS Cognito?

AWS Cognito is used by some platforms for secure authentication based on browser details. Its advanced security feature (ASF) inspects the device and browser fingerprint of whoever is signing in and expects a matching token to be sent alongside the username and password. Without that token, or with one that does not match the request, the login is rejected.

Some sites using AWS Cognito

Website
Ticketmaster SG