I mean having the client source code can show you a vast number of the API's and... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

pixl97 24 days ago | parent | context | favorite | on: Kimi K3 exploited the latest Redis server

I mean having the client source code can show you a vast number of the API's and their fields which allows you to fuzz the server quite a bit more easily.

sigmoid10 23 days ago [–]

Maybe. The RCE was on the Telegram Desktop client though.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact