FreyXFI

Web LLM attacks Lab Exploiting LLM APIs with excessive agency

FreyXFI

Web LLM Attacks Lab Exploiting AI agents to trigger secondary vulnerabilities

FreyXFI

Web LLM Attacks Lab Exploiting AI agents to exfiltrate sensitive information

FreyXFI

Web LLM Attacks Lab Bypassing AI scanner defenses to exfiltrate sensitive information

FreyXFI

Web LLM Attacks Lab Indirect prompt injection

FreyXFI

Web LLM attacks Lab Exploiting vulnerabilities in LLM APIs

FreyXFI

Web LLM Attacks Lab Exploiting insecure output handling in LLMs

FreyXFI

Web LLM Attacks Lab Exploiting AI agents to perform destructive actions

FreyXFI

SSRF Lab Basic SSRF against the local server

FreyXFI

SSRF Lab SSRF with filter bypass via open redirection vulnerability

FreyXFI

SSRF Lab SSRF with blacklist-based input filter

FreyXFI

SSRF Lab SSRF with whitelist-based input filter

FreyXFI

SSRF Lab Blind SSRF with out-of-band detection

FreyXFI

SSRF Lab Blind SSRF with Shellshock exploitation

FreyXFI

SSRF Lab Basic SSRF against another back-end system

FreyXFI

JWT Attacks Lab JWT authentication bypass via flawed signature verification

FreyXFI

JWT Attacks Labs JWT authentication bypass via jku header injection

FreyXFI

JWT Attacks Labs JWT authentication bypass via kid header path traversal

FreyXFI

JWT Attacks Lab JWT authentication bypass via algorithm confusion

FreyXFI

JWT Attacks Lab JWT authentication bypass via unverified signature

FreyXFI

JWT Attacks LAB JWT authentication bypass via jwk header injection

FreyXFI

JWT Attacks Lab JWT authentication bypass via weak signing key

FreyXFI

JWT Attacks Lab JWT authentication bypass via algorithm confusion with no exposed key

FreyXFI

Web cache poisoning - Lab URL normalization

FreyXFI

Web cache poisoning - Lab Combining web cache poisoning vulnerabilities

FreyXFI

Web cache poisoning - Lab Cache key injection

FreyXFI

Web cache poisoning to exploit a DOM vulnerability via a cache with strict cacheability criteria

FreyXFI

Web cache poisoning - Lab Internal cache poisoning

FreyXFI

Web cache poisoning - Lab Web cache poisoning via a fat GET request

FreyXFI

Web cache poisoning - Lab Parameter cloaking

FreyXFI