News for hackers. Stuff that matters.
Re:Launch HN: Kampala (YC W26) – Reverse-Engineer Apps into ... by peterabbitcook on Thursday April 16, 2026 @02:03PM (#47797206)
It seems like it’s quite HTTP-centric (like most of the web…). I didn’t see anything on the page about this - can it also intercept / “reverse engineer” service calls that go over gRPC or WebSocket? I’m guessing at least a partial “yes” if the gRPC traffic uses grpc-web/Envoy?

Seems like a great product, potentially quite powerful for automated testing of SPAs.

Re:Launch HN: Kampala (YC W26) – Reverse-Engineer Apps into ... by alexblackwell_ on Thursday April 16, 2026 @02:21PM (#47797408)
Yep we handle gRPC and websocket. gRPC is a bit sketch/hard to do because of the way the protocol is designed. FWIW not many sites implement gRPC (some google sites and spotify being the only two I can think of), and if they do they usually have decent APIs. Feel free to try and lmk if you have any issues!
Re:Launch HN: Kampala (YC W26) – Reverse-Engineer Apps into ... by 5701652400 on Thursday April 16, 2026 @02:46PM (#47797746)
so how do you parse gRPC binary? unless you have proto definitions, it is blackbox and is totally unsuable, isn't it?
Re:Launch HN: Kampala (YC W26) – Reverse-Engineer Apps into ... by alexblackwell_ on Thursday April 16, 2026 @03:36PM (#47798397)
gRPC obscures the keys not the values. Enums and signed ints are sort of tricky, but the latter is just a mapping problem and the former can be figured out through some logical deduction. gRPC isn't designed to obscure request content, but for over the wire efficiency.