Lab: Exploiting vulnerabilities in LLM APIs

This lab contains an OS command injection vulnerability that can be exploited via its APIs. You can call these APIs via the LLM. To solve the lab, delete the morale.txt file from Carlos' home directory.
Required knowledge
To solve this lab, you'll need to know:
How to map LLM API attack surface. For more information, see our see our Web LLM attacks Academy topic.
How to exploit OS command injection vulnerabilities. For more information, see our OS command injection topic.