LLM Red Teaming and Testing
59 videos enrolled · 2 in the catalog
Listing is free. Every video appears the moment it is found. Analysed videos open their catalog entry; the rest link to YouTube and join the catalog as the metered pass drains this source (policy recent).
Copilot RCE in Visual Studio and SQL Server Managment Studio CVE-2026-103572![From SELECT to SYSADMIN: Hijacking Copilot in SQL Server Management Studio (SSMS) [CVE-2026-65669]](https://i.ytimg.com/vi/g347jsz2kEU/mqdefault.jpg)
From SELECT to SYSADMIN: Hijacking Copilot in SQL Server Management Studio (SSMS) [CVE-2026-65669]
SQL Copilot: Indirect prompt injection exploit demonstration for updating table
SQL Copilot: SYSADMIN Elevation via planting malicious DB Constitution
Copirate 365: Plundering in the Depths of Microsoft Copilot (DEF CON Singapore Talk)
Breaking Claude Code Auto Mode (Opus 5) - POC Demonstration
Breaking Claude Code Opus 5 Auto Mode - Remote Code Execution (Walkthrough and Details)
Recovering Encrypted Reasoning Traces (Stealing Proprietary LLM Thoughts)
LLM Heist: Hijacking LiteLLM for Traffic Interception, Key Theft, and Tool-Call Injection
LLM Heist - Technical Demo
Computer-Use and TOCTOU: What You Click Is Not What You Get!
Copirate 365 Demos (2/3): Hacking M365 Copilot Memories
Hacking Consumer Copilot Demo: Memory Modification and Exfiltration. POC - Fixed.
Copirate 365 Demos (1/3): Data Exfiltration via Copilot in Word and Excel (CVE-2026-24299)
Breaking Claude Opus 4.7 with ChatGPT (Hacking Claude's Memory)
Agent Commander: Promptware Powered C2. Your Agent Works For Me Now (OpenClaw, Kimi Claw, NanoClaw)
Scary Agent Skills: Hidden Unicode Backdoors in AI Agent Skills! ...And How To Catch Them
Minting Next.js Authentication Cookies (Next Auth Post Exploitation)
Agentic ProbLLMs: Exploiting AI Computer-Use and Coding Agents (39c3)
From SpAIware to the Terminal DiLLMa - Prompt Injection Exploits And Fixes! (NahamCon May 2025)
Antigravity Grounded! Exploring Security Vulnerabilities in Google's Latest IDE
Claude Pirate! Data Exfiltration with Anthropic APIs and Prompt Injection
Cross-Agent Privilege Escalations: When Agents Free Each Other
Terminal DiLLMa #2: LLM Apps Secretly Writing to Your Clipboard. This can lead to RCE – Beware!
AgentHopper: An AI Virus (Proof-of-concept Research Project)
AWS Kiro: Arbitrary Code Execution with Indirect Prompt Injection (now fixed)
Episode 19: Amazon Q Developer: Remote Code Execution with Prompt Injection
Episode 18: Amazon Q Developer - Data Exfiltration via DNS and Prompt Injection
GitHub Copilot: Invisible Prompt Injection to Remote Code Execution
GitHub Copilot: Popping a calculator with Prompt Injection (macOS)
GitHub Copilot: Popping a calculator with Prompt Injection (Windows)
Amazon Q Developer VS Code Extension - Popping a Calculator with Prompt Injection
Security Advisory: Anthropic's Slack MCP Server Can Leak Your Data
Windsurf SpAIware Attack Explained: Memory-Persistent Prompt Injection
AI ClickFix: Hijacking Computer-Use Agents with popular social engineering tricks, like ClickFix.
Hacking LLM Apps & Agents: Real-World Exploits (Prompt Injection Along the CIA Security Triad)
Google AI Studio rendering clickable hyperlink link with invisible data
Gemini in Google Sheets: Prompt Injection Demo
Google Gemini: Hacking Memories with Prompt Injection and Delayed Tool Invocation
Google AI Studio: Data Exfiltration via Prompt Injection. Quickly Fixed After Responsible Disclosure
Terminal DiLLMa #5: DNS Data Leakage in macOS Terminal App (speedrun)
DeepSeek AI: LLM Apps that hack themselves. Finding XSS - The 10x Hacker.
DeepSeek AI Chat: From Prompt Injection To Account Takeover (responsibly disclosed and now fixed)
Terminal DiLLMa #1: Simple ANSI Code Prompt Injection
Claude Computer Use: The ZombAIs are coming! From Prompt Injection to Command & Control.
Microsoft Copilot: From Prompt Injection to Exfiltration of Sensitive Data | Exploit Chain Explained
M365 Copiloate Data Exfil Demo Prompt Injection- Slack MFA Codes exfil (unlisted)
m365 copilot email data exfil ascii smugglingfinal (unlisted) -better?
Microsoft 365 Teams Copilot: Prompt Injection, ASCII Smuggling, Data Exfiltration (unlisted)
Microsoft Copilot: Prompt Injection, Tool Invocation, ASCII Smuggling, Data Exfiltration (unlisted)
Google Colab with Gemini AI - Prompt Injection Pirate Demo (POC)
Google AI Studio -Video Analysis to Data Exfiltration via Instructions in Video (unlisted)
Google AI Studio - New Demo (unlisted)
Google Gemini - Prompt Injection Scam
GitHub Copilot Chat - From Prompt Injection to Data Exfiltration
GitHub Copilot Chat: Prompt Injection to Data Exfiltration Demo 2 (unlisted)
LLM Vulnerability Scanning with garak. Tutorial: Test your own chat bots!
Muse LibreOffice Data Exfiltration POC (UNLISTED)
Muse pdfdetach POC