Unverified50% confidenceFactExact time
REA's inspect_web_network_capture tool can read HAR files offline or native mitmproxy captures on Linux, does not re-request the already-recorded URLs, and structurally excludes authorization headers, cookies, and credentials in URLs.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/13/2026
First Seen
Valid until: 1/11/2027
Sources
Related Entities
Related Claims
UnverifiedThe backdoor assembles a URL from Base64 fragments to conceal the real address, and downloads a platform-specific payload based on the operating system, writing it to the /Temp directory for execution.68% similarUnverified互联网档案馆的Wayback Machine等第三方存档服务会持续抓取政府网站，部分被删除内容可能仍可检索60% similarUnverifiedFingerprint collection occurs in server-side logic during HTTP request processing and does not rely on client-side storage APIs; therefore, storage isolation strategies such as Safari's ITP and Firefox's ETP have almost no effect on blocking it.58% similarUnverified在演示中，豆包按照提示词执行后不仅确认了URL预览功能存在SSRF漏洞，还验证出任意文件读取问题58% similarUnverifiedCheckpoints actively exclude files such as .git, log caches, and runtime directories, managing only the recoverable Agent working state.56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1013809API
curl https://kongchang.com/api/v1/knowledge/claims/1013809MCP
get_claim(id=1013809)