DEF CON 34 - BugBounty - How Cache Poisoning Led to Critical Acct Takeover in TikTok's Web - G Chong
DEFCONConference · 21:03 · Watch on YouTube
The speaker walks through a real-world web cache vulnerability research at TikTok, showing how OAuth caching flaws led to zero-click and one-click account takeovers, and what defensive lessons were learned.