Platform

AI Platforms

Covers attacking AI systems across recon of endpoints and APIs, threat modeling agent permissions, finding vulns in LLMs and RAG, exploiting AI infra, and poisoning supply chains

58 guides 6 phases

Reconnaissance

Guides for mapping AI endpoints, models, APIs, and dependencies

View all 6

Discovering AI Applications and LLM Endpoints

Mar 18, 2026 • 2 min read

Enumerating Vector Databases and RAG Pipeline Components

Mar 18, 2026 • 3 min read

Finding AI Supply Chain Components

Mar 18, 2026 • 4 min read

Fingerprinting Model Providers and Versions

Mar 18, 2026 • 4 min read

Identifying Exposed Model Servers and Inference APIs

Mar 18, 2026 • 3 min read

Mapping AI Dependencies, SDKs, and Frameworks

Mar 18, 2026 • 4 min read

Threat Modeling

Guides on mapping AI trust boundaries, agent permissions, and targets

View all 5

Identifying High-Value Targets in AI Systems

Mar 18, 2026 • 4 min read

Single Points of Failure in Multi-Agent Workflows

Mar 18, 2026 • 3 min read

Identifying Trust Boundaries in AI Architectures

Mar 18, 2026 • 3 min read

Mapping A2A Communication Flows and Inter-Agent Trust

Mar 18, 2026 • 3 min read

Mapping Agent Permissions, Tool Access, and Memory

Mar 18, 2026 • 4 min read

Vulnerability Discovery

Guides covering vuln discovery in LLM, RAG, MCP, and AI infra

View all 6

Detecting Insecure Tool Integrations in AI Agents

Mar 18, 2026 • 4 min read

Detecting Prompt Injection and System Prompt Boundaries

Mar 18, 2026 • 4 min read

Detecting AI Supply Chain and Infrastructure Weaknesses

Mar 18, 2026 • 4 min read

Detecting Weak Access Controls on Inference Endpoints

Mar 18, 2026 • 4 min read

Identifying Exposed MCP Surfaces

Mar 18, 2026 • 1 min read

Identifying RAG Pipeline Poisoning Opportunities

Mar 18, 2026 • 3 min read

Exploitation

Exploit LLM apps, RAG pipelines, agents, and AI infrastructure

View all 31

5 steps

Embeddings and Model Internals

Mar 26, 2026 • 2 min read

Adversarial Examples Against AI Models

Mar 26, 2026 • 2 min read

Embedding Inversion to Recover Training Data

Mar 26, 2026 • 3 min read

Membership Inference Attacks Against AI Models

Mar 26, 2026 • 3 min read

Model Extraction via Query Enumeration

Mar 26, 2026 • 2 min read

Sensitive Data Extraction Through Adversarial Prompting

Mar 26, 2026 • 3 min read

Post-Exploitation

Guides on persistence, pivoting, and data extraction from AI systems

View all 5

Enumerating Connected Tools and Services

Mar 26, 2026 • 4 min read

Extracting System Prompts and Proprietary Instructions

Techniques for extracting hidden system prompts and proprietary instructions from deployed AI models using prompt injection, jailbreaks, and inference attacks.

Mar 26, 2026 • 4 min read