Table of Contents
Lab Exploiting LLM APIs with excessive agency
1: Access the Lab: Exploiting LLM APIs with excessive agency.
Link: https://portswigger.net/web-security/llm-attacks/lab-exploiting-llm-apis-with-excessive-agency
2: Click on the Live chat.
3: Check the users in the AI chatbots.
Command: SELECT * FROM users
4: Delete the Username “carlos”.
Command: DELETE FROM users WHERE username=’carlos’
5: Check the users’ list again.
Command: SELECT * FROM users
