Advanced ByteReplay recorder-redirection PoC

This page actively replaces the recorder upload destination and enables response-body capture. Use only with a receiver and account you control. A normal pages.dev, workers.dev, or r2.dev receiver is blocked by TikTok Ads' observed CSP. Deploy the companion AWS receiver and paste its ReceiverBaseUrl below.

Controlled advertiser/account ID Authenticated target route Attacker-controlled HTTPS receiver base URL allowed by target CSP

The receiver must answer recorder creation and accept replay blocks at:

POST /api/recording/<parent-id>/create
POST /api/storage/<recording-id>/block/append

It must allow CORS from https://ads.tiktok.com. The create response must select the streaming-http strategy and gzip packer. API response content appears only when the target page itself requests that API while capture is active.