Week 4: Insecure Output Handling — From Toy Demo to Real Attack Chains
Building a toy XSS demo to understand why LLM output shouldn’t be trusted downstream, then tracing how this plays out in real CVEs and NVR-style natural language query systems.
Owasp
Week 1: OWASP LLM Top 10 and Prompt Injection Testing on Llama 3 and Mistral
Testing three prompt injection techniques against two local LLMs (Llama 3 8B and Mistral 7B) — direct override, roleplay jailbreak, and encoding obfuscation — to see how they hold up.