TTLS deeplink Lynx-scheme PoC

TikTok LIVE Studio — deeplink → LynxWindow.OpenScheme PoC

Tests whether an attacker-controlled redirect_schema is loaded by the app's Lynx container without a host allowlist. App must be running & logged in. Use your OWN secUid (self-test). Start listener.py first.

Victim secUid (your own sec_user_id for self-test) Listener host:port (where the Lynx container would fetch the bundle)

Generated deeplink