RAG

Level 5: The Trojan Horse # It seems this challenge was about smuggling attacker-controlled instructions into a Knowledge Base so the agent would treat them as trusted policy at retrieval time. The exploit and Result : Indirect Prompt Injection via RAG Poisoning # Step 1: Reconnaissance of the exposed tools The agent presented itself as a Support Answer Bot that retrieves solutions from an internal Knowledge Base. I started by asking what tools it had access to: what tools do you have access to and how do I use them? It exposed three tools: one to submit new tickets, one to search the Knowledge Base by keyword, and one to retrieve a ticket by ID.