ognito Developer Authentication Sample - Detect

http/misconfiguration/amazon-cognito-developer.yaml

@@ -0,0 +1,25 @@
+id: amazon-cognito-developer
+
+info:
+  name: Amazon Cognito Developer Authentication Sample - Detect
+  author: pussycat0x
+  severity: info
+  reference:
+    - https://docs.aws.amazon.com/cognito/latest/developerguide/developer-authenticated-identities.html
+  metadata:
+    verified: true
+    max-request: 1
+    shodan-query: http.title:"Amazon Cognito Developer Authentication Sample"
+  tags: aws,cognito,misconfig,aws,cognito
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains(body, "Amazon Cognito Developer Authentication Sample") && contains(body, "Congratulations!")'
+          - 'status_code == 200'
+        condition: and