DEF CON 34 - BugBounty - How Cache Poisoning Led to Critical Acct Takeover in TikTok's Web - G Chong

DEFCONConference · 21:03 · Watch on YouTube

The speaker walks through a real-world web cache vulnerability research at TikTok, showing how OAuth caching flaws led to zero-click and one-click account takeovers, and what defensive lessons were learned.

Read the full summary on retube

English