computer-scienceangular-roadmapbackend-roadmapblockchain-roadmapdba-roadmapdeveloper-roadmapdevops-roadmapfrontend-roadmapgo-roadmaphactoberfestjava-roadmapjavascript-roadmapnodejs-roadmappython-roadmapqa-roadmapreact-roadmaproadmapstudy-planvue-roadmapweb3-roadmap
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1.1 KiB
1.1 KiB
Remote Code Execution
AI Red Teamers attempt to achieve RCE on systems hosting or interacting with AI models. This could involve exploiting vulnerabilities in the AI framework itself, the web server, connected APIs, or tricking an AI agent with code execution capabilities into running malicious commands provided via prompts. RCE is often the ultimate goal of exploiting other vulnerabilities like code injection or insecure deserialization.
Learn more from the following resources:
- @article@Exploiting LLMs with Code Execution (GitHub Gist) - Example of achieving code execution via LLM manipulation.
- @article@What is remote code execution? - Cloudflare - Definition and explanation of RCE.
- @video@DEFCON 31 - AI Village - Hacking an LLM embedded system (agent) - Johann Rehberger - Demonstrates RCE risks with LLM agents.