Bypass Solution
This documentation provides detailed information on generating the Cognito cognitoAsfData
Last updated
Was this helpful?
This documentation provides detailed information on generating the Cognito cognitoAsfData
Last updated
Was this helpful?
To bypass Castle:
Send to our endpoint the website domain and mail
Parse the response and use it as cognitoAsfData
website: The website domain
username: The username or mail you are going to use for authentiation
It's highly recommended to provide your session’s User-Agent, Sec-Ch-Ua, and Accept-Language headers for more accurate token generation.
In order to access any of our endpoint you'll need a valid API Key, either join our discord for a trial or puchase a plan
This endpoint generates the cognitoAsfData for Cognito-protected websites. It requires the website domain and the username (or mail) you need to login with. The browser's user-agent string and client hints can also be passed for content negotiation.
/generate
The website domain you are interacting with.
Either the mail or username you need to login
The browser's user-agent string to simulate during the request.
Client hints for content negotiation (used by some modern browsers).