Загрузка...

IDOR bug affecting TikTok allowing for unauthorized account changes (Bug Bounty Report)

This is an IDOR/BOLA issue found via Bug0xF4 member 'Doc' whilst hunting on TikTok's bug bounty program. This issue has now been fixed and we have been given permission by TikTok to post this video.

Twitter: https://twitter.com/0dayWizard
Github: https://github.com/MLT-0x539
Upwork: https://www.upwork.com/freelancers/~01ebb1d65eec00edd7
My Blog: https://0x80dotblog.wordpress.com
Keybase: https://keybase.io/0dayWizard

Видео IDOR bug affecting TikTok allowing for unauthorized account changes (Bug Bounty Report) канала Bug0xF4
TikTok IDOR BOLA Vulnerability exploit bugbounty bug bounty bug bounty reward webapp web application security hackerone broken access control account takeover 0day zeroday pentesting penetration testing yt:cc=on
Комментарии отсутствуют
Зарегистрируйтесь или войдите с
Информация о видео
18 сентября 2023 г. 18:23:23
00:02:08
Bug0xF4
Теги
Правообладателям
Жалоба на материал Недопустимый материал Нарушение авторских прав
Комментарии
Поделиться
Другие видео канала

MESSAGE TO ALL VIEWERS/SUBSCRIBERS: Audio Issues - My current situation/problem (WILL BE FIXED SOON)MESSAGE TO ALL VIEWERS/SUBSCRIBERS: Audio Issues - My current situation/problem (WILL BE FIXED SOON)

OS Command Injection Tutorial (Triggering RCE) - Part #1 (Introduction and Basic Overview)OS Command Injection Tutorial (Triggering RCE) - Part #1 (Introduction and Basic Overview)

Accidentally finding a vuln in hackerone while reporting a vuln via hackerone, lol..Accidentally finding a vuln in hackerone while reporting a vuln via hackerone, lol..

Linux for Beginners: Part 1 - Intro (Terminal Usage, Bash, Package Managers, DE's, Perms/Privs, etc)Linux for Beginners: Part 1 - Intro (Terminal Usage, Bash, Package Managers, DE's, Perms/Privs, etc)

Instagram/Facebook SSRF: Cross-Site-Port-Attack (XSPA)Instagram/Facebook SSRF: Cross-Site-Port-Attack (XSPA)

Open Redirect in google.comOpen Redirect in google.com

Introduction to HTTP (Part #1) -- Basics of HTTP requests/responses, headers, HTTP methods, and moreIntroduction to HTTP (Part #1) -- Basics of HTTP requests/responses, headers, HTTP methods, and more

Microsoft XSS + Cross Site Flashing vulnerabilitiesMicrosoft XSS + Cross Site Flashing vulnerabilities

cia.gov DOM-based XSS vulnerabilitycia.gov DOM-based XSS vulnerability

Salesforce content-forgery PoCSalesforce content-forgery PoC

UC-HTTPD: IoT Security Cam 1-days / n-days - Local File Disclosure + Buffer OverflowUC-HTTPD: IoT Security Cam 1-days / n-days - Local File Disclosure + Buffer Overflow

Google RFD (Reflected File Download exploit)Google RFD (Reflected File Download exploit)

ONE EMOJI TO RULE THEM ALLONE EMOJI TO RULE THEM ALL

Invision Power Board - XSS Zeroday: Admin account takeoverInvision Power Board - XSS Zeroday: Admin account takeover

Microsoft/Outlook account lockout bypass via Race Condition leading to Account TakeoverMicrosoft/Outlook account lockout bypass via Race Condition leading to Account Takeover

Welcome to Bug0xF4: Your Journey into Cybersecurity Begins HereWelcome to Bug0xF4: Your Journey into Cybersecurity Begins Here

InsecurityTube || Blind Cross-Site-Scripting (bXSS) || TutorialInsecurityTube || Blind Cross-Site-Scripting (bXSS) || Tutorial

CNN Interview with TeaMp0isoN "MLT" (aush0k lol) calling TriCk a 'black power-ranger'CNN Interview with TeaMp0isoN "MLT" (aush0k lol) calling TriCk a 'black power-ranger'

HaxJutsu OverviewHaxJutsu Overview

Link Spoofing 0day for DiscordLink Spoofing 0day for Discord

Яндекс.Метрика
© 2008-2026 «Информационно-развлекательный портал города Верхняя Салда»
salda.ws@mail.ru salda_ws Контакты Карта портала Сообщить об ошибке Соглашения Пользовательское соглашение Соглашение о конфиденциальности Согласие на обработку персональных данных Информация для правообладателей Об использовании Cookies
Все заметки Новая заметка Страницу в заметки
Страницу в закладки Мои закладки
На информационно-развлекательном портале SALDA.WS применяются cookie-файлы. Нажимая кнопку Принять, вы подтверждаете свое согласие на их использование.
О CookiesНапомнить позжеПринять