Latest posts
-
Lab: Exploiting vulnerabilities in LLM APIs
This lab contains an OS command injection vulnerability that can be exploited via its APIs. You can call these APIs via the LLM. https://portswigger.net Ask the LLM what APIs it has access to. The LLM responds that it can access APIs controlling the following functions: Consider the following points: Ask the LLM what arguments the…
-
Web LLM attacks
Organizations are rushing to integrate Large Language Models (LLMs) to improve their online customer experience. https://portswigger.net What is a large language model? Large Language Models (LLMs) are AI algorithms that can process user inputs and create plausible responses by predicting sequences of words. They are trained on huge semi-public data sets, using machine learning to…
-
Lab: Reflected XSS with AngularJS sandbox escape without strings
This lab uses AngularJS in an unusual way, where the $eval function is not available, and you will be unable to use any strings in AngularJS. To solve the lab, perform a cross-site scripting attack that escapes the sandbox and executes the alert function without using the $eval function. https://portswigger.net The exploit uses toString() to create a string…
-
reflected DOM vulnerability
Reflected DOM vulnerabilities occur when the server-side application processes data from a request and echoes the data in the response. https://portswigger.net Tools: Burp Suite, OWASP ZAP, Linux Content security policy header not set . The recommendation is to implement a strict CSP to reduce the risk and impact of client-side attacks like XSS, data exfiltration, and clickjacking.…