This lab handles LLM output insecurely, leaving it vulnerable to XSS. The user carlos frequently uses the live chat to ask about the Lightweight "l33t" Leather Jacket product. To solve the lab, use indirect prompt injection to perform an XSS attack that deletes carlos.
Download
0 formats
No download links available.
Web LLM Attacks Lab: Exploiting insecure output handling in LLMs | NatokHD