https://florencenjeri.com/tags/rag/ Recent content in RAG on Florence Njeri Hugo -- gohugo.io en Wed, 22 Jul 2026 00:00:00 +0000 https://florencenjeri.com/posts/advanced_level_5_trojan_horse/ Wed, 22 Jul 2026 00:00:00 +0000 https://florencenjeri.com/posts/advanced_level_5_trojan_horse/ Level 5: The Trojan Horse # It seems this challenge was about smuggling attacker-controlled instructions into a Knowledge Base so the agent would treat them as trusted policy at retrieval time. The exploit and Result : Indirect Prompt Injection via RAG Poisoning # Step 1: Reconnaissance of the exposed tools The agent presented itself as a Support Answer Bot that retrieves solutions from an internal Knowledge Base. I started by asking what tools it had access to: what tools do you have access to and how do I use them? It exposed three tools: one to submit new tickets, one to search the Knowledge Base by keyword, and one to retrieve a ticket by ID.