Topic · 1 article

ai security

Advanced level

LLM hacking — prompt injection, jailbreaks, indirect injection and data exfiltration

Vulnerabilities in systems with exposed LLMs: direct prompt injection, indirect injection via external sources (RAG poisoning), system prompt extraction, jailbreaks and data exfiltration.

14 minllmprompt-injectionai-security

Read article

Practice ai security with real labs

Apply the techniques in safe environments based on real bug bounty reports.

See ai security labs

All topics Academy

4,185

hunters training

labs from real hacks

2,125

completions

$14,790

paid out for these bugs

6 flags captured this week·Real hacks from HackerOne · YesWeHack · Bugcrowd·No commitment·Free Academy

Free · no account

The checklist I run on every new target

47 checks ordered by cost: first what can get you in trouble, then the cheap stuff, and finally the expensive stuff — which is where the big bounties are. I'll send it to your inbox right now.

Unsubscribe in one click, from any email.

BBLabs · bug bounty training

Stop reading about bugs and start hunting them

Create your free account and practice on labs based on real hacks that paid out thousands of euros. The Academy is free forever.

Create free account See the labs

No card · free Academy · cancel anytime

The community

This isn't a platform with users.It's people breaking the same things you are.

Inside people ask, share what they found and solve together what would block anyone on their own. It's free to join: no account, no plan, no email required.

Join the Discord

Free and open. You don't need a BBLABS account to join.