Unverified75% confidenceEventTime unknown
DeepSeek TUI在未经提示词引导的情况下，主动进行路径遍历，成功发现隐藏接口upload.jsp并验证了任意文件上传漏洞
1
Sources
75%
Confidence
Medium-term (~90 days)
Relevance
6/2/2026
First Seen
Valid until: 8/31/2026
Sources
AI渗透测试实战：DeepSeek配合三大Agent挖漏洞效果对比
bilibili大白哥AI与安全
Related Entities
Related Claims
UnverifiedDeepSeek TUI发现隐藏接口并验证漏洞的整个过程仅消耗0.15元人民币73% similarUnverifiedDeepSeek在测试中对直接请求生成网络攻击相关代码的提示词直接拒绝，并解释该请求超出其安全准则范围66% similarUnverifiedWebRTC泄露会绕过VPN隧道暴露用户真实本地IP，是地区伪装识别信号61% similarUnverified2014年的Heartbleed漏洞揭示了OpenSSL这样被全球互联网依赖的项目仅由两名兼职维护者支撑60% similarUnverifiedClaude Code和Codex在第一轮测试中未能发现隐藏的upload.jsp接口，仅停留在XSS等常规漏洞检测60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/37523API
curl https://kongchang.com/api/v1/knowledge/claims/37523MCP
get_claim(id=37523)