Latest posts

  • Lab: Exploiting vulnerabilities in LLM APIs

    This lab contains an OS command injection vulnerability that can be exploited via its APIs. You can call these APIs via the LLM. https://portswigger.net Ask the LLM what APIs it has access to. The LLM responds that it can access APIs controlling the following functions: Consider the following points: Ask the LLM what arguments the…

    Read more

  • Web LLM attacks

    Organizations are rushing to integrate Large Language Models (LLMs) to improve their online customer experience. https://portswigger.net What is a large language model? Large Language Models (LLMs) are AI algorithms that can process user inputs and create plausible responses by predicting sequences of words. They are trained on huge semi-public data sets, using machine learning to…

    Read more

  • Lab: Reflected XSS with AngularJS sandbox escape without strings

    This lab uses AngularJS in an unusual way, where the $eval function is not available, and you will be unable to use any strings in AngularJS. To solve the lab, perform a cross-site scripting attack that escapes the sandbox and executes the alert function without using the $eval function. https://portswigger.net   The exploit uses toString() to create a string…

    Read more

  • reflected DOM vulnerability

    Reflected DOM vulnerabilities occur when the server-side application processes data from a request and echoes the data in the response. https://portswigger.net Tools: Burp Suite, OWASP ZAP, Linux Content security policy header not set  . The recommendation is to implement a strict CSP to reduce the risk and impact of client-side attacks like XSS, data exfiltration, and clickjacking.…

    Read more