Link for non-members: Link

🚨 Lab: Exploiting Vulnerabilities in LLM APIs (Practitioner)

🎯 Objective

Use the LLM-powered assistant to exploit an OS command injection vulnerability and delete:

/home/carlos/morale.txt

🧩 Introduction

LLMs are increasingly integrated with backend systems — but what happens when they pass user input directly into system commands?

This lab demonstrates a dangerous combination:

LLM + API + OS Command Injection = Full System Compromise

🏗️ Application Behavior

The chatbot assistant claims it can only help with:

• Password resets
• Newsletter subscriptions
• Product information

⚠️ At first glance, this looks safe.

But in reality:
👉 APIs back these features
👉 These APIs may execute system-level commands

🔍 Step 1: Identify the Real Attack Surface