https://florencenjeri.com/tags/sensitive-information-disclosure/ Recent content in sensitive information disclosure on Florence Njeri Hugo -- gohugo.io en Mon, 06 Jul 2026 00:00:00 +0000 https://florencenjeri.com/posts/advanced-level-1-context-gateway-leak/ Mon, 06 Jul 2026 00:00:00 +0000 https://florencenjeri.com/posts/advanced-level-1-context-gateway-leak/ Level 1: The Context Gateway # This challenge was about finding a hidden config value that the agent leaked through its own diagnostic and logging tools. Instead of guessing or brute forcing the value, I used the monitoring tools against the agent to get it to print the exact internal setting needed to unlock the flag. The exploit and Result : Side-Channel Information Leakage # Step 1: Reconnaissance of the exposed tools Level 1 exposed three tools: view_system_logs, discover_services (with scan modes network, process, verbose, and custom), and multi_tool_use.parallel. I started by asking the model what tools it had access to and how they worked: