← back to hub ↑ parent
LLM06: Excessive Agency

LLM06: Excessive Agency

Interact with an LLM-powered chatbot integrated with a file management system. The system includes both public and restricted folders, with the latter accessible only to users with admin privileges.

Goal: Discover the vulnerability and manipulate the chatbot to access flag.txt, which is restricted to admin-only access.

PromptMe