Deschide articolul original într-un tab nou Schimbarea acestei opțiuni se aplică imediat și reîncarcă pagina.
LECTURA
Înapoi la articole →

IT meets OT

itmeetsot.eu/feed.xml
Vizitează site-ul

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 23

  1. From /init to Arbitrary Privileged Code Execution with Gpt-6.1-sol in Codex-cli

    (IT meets OT)

    Disclaimer: Prompt injection is an unsolved problem.

  2. From Math to Arbitrary Code Execution with Opus-5.5 in GitHub Copilot CLI

    (IT meets OT)

    Disclaimer: Prompt injection is an unsolved problem.

  3. Triple A: Astra, Auto-Review, Arbitrary Code Execution (Indirect Prompt Injection Experiment)

    (IT meets OT)

    Disclaimer: Prompt injection is an unsolved problem.

  4. Data Exfiltration in Codex-cli with Gpt-5.6-Sol and Auto-Review Permission Mode

    (IT meets OT)

    Disclaimer: Prompt injection is an unsolved problem.

  5. Prompt Injection Experiments with Opus-5 in Claude Code - Auto-Mode Edition

    (IT meets OT)

    Disclaimer: Prompt injection is an unsolved problem.

  6. From /init to Code Execution - Prompt Injection Experiments with Opus-5 in Claude Code

    (IT meets OT)

    Disclaimer: Prompt injection is an unsolved problem.

  7. [UPDATE] The Prompt Injection Quest to RCE with Fable-5 and Gpt-5.6-Sol

    (IT meets OT)

    Disclaimer: This post is for educational purpose, prompt injection is an unsolved problem.

  8. The Prompt Injection Quest to RCE with Fable-5 in Claude Code

    (IT meets OT)

    Disclaimer: This post is for educational purpose, prompt injection is an unsolved problem (but running Claude Code in a sandbox would mostly solve this problem).

  9. Indirect Prompt Injection in Claude Code with (Fable-5) Opus-4.8

    (IT meets OT)

    Disclaimer: This post is for educational purpose, prompt injection is an unsolved problem.

  10. YOLO is Russian Roulette: Indirect Prompt Injection Experiments in Coding Harnesses

    (IT meets OT)

    I really wanted to play around with Fable-5...

  11. BrokenClaw Part 7: Opus-4.8 Edition - All Emails Lead to RCE

    (IT meets OT)

    Another day, another model.

  12. BrokenClaw Part 6: GPT-5.5 & Opus-4.7 Edition - Avoid the Guardrails

    (IT meets OT)

    The last (for how long?)

  13. BrokenClaw Part 5: GPT-5.4 Edition

    (IT meets OT)

    Lastly the openai model gpt-5.4 gained in popularity within the OpenClaw community (maybe this is the reason).

  14. BrokenClaw Part 4: From Web Fetch to Code Execution

    (IT meets OT)

    Another BrokenClaw!

  15. BrokenClaw Part 3: Remote Code Execution in OpenClaw via Email Again - This Time via Tool

    (IT meets OT)

    Third part of the BrokenClaw saga!

  16. XSS in Dify could lead to Workspace Takeover

    (IT meets OT)

    In Dify, I found a cross site scripting vulnerability (XSS) in the web application chat frontend when using echarts.

  17. Indirect Prompt Injection in Github Copilot - Now with Opus4.6

    (IT meets OT)

    You remember this experiment with sonnet 4.5?

  18. BrokenClaw Part 2: Escape the Sub-Agent Sandbox with Prompt Injection in OpenClaw

    (IT meets OT)

    In the first part of this saga (read first), I described a 0-Click RCE in OpenClaw using prompt injection and exploiting the insecure plugin handling.

  19. BrokenClaw Part 1: 0-Click Remote Code Execution in OpenClaw via Gmail Hook

    (IT meets OT)

    This post is not related to OT but I could not resist.

  20. Data Exfiltration via Image Rendering in RAG Chatbot Frontend

    (IT meets OT)

    Today we will use dify, an "open-source platform for developing LLM applications" to show how data exfiltration works - a classical problem in Retrieval Augmented Generation (RAG)...

  21. RCE via Indirect Prompt Injection in VSCode with Github Copilot

    (IT meets OT)

    Classic but still up-to-date.

  22. Prompt Injection 101 with n8n

    (IT meets OT)

    In my last post, I experimented with a python agent and prompt injection using different LLMs.

  23. Models, Agents and Prompt Injections - Some Experiments.

    (IT meets OT)

    Inspired by this blog post and out of curiousity, I vibe-built a simple LLM agent in the terminal with a few tools and MCP capability.