Aggregator

LLM Apps: Don't Get Stuck in an Infinite Loop! 💵💰

Embrace The Red
2 years 8 months ago

What happens if an attacker calls an LLM tool or plugin recursively during an Indirect Prompt Injection? Could this be an issue and drive up costs, or DoS a system?

I tried it with ChatGPT, and it indeed works and the Chatbot enters a loop! 😊

However, for ChatGPT users this isn’t really a threat, because:

  1. It’s subscription based, so OpenAI would pay the bill.
  2. There seems to be a call limit of 10 times in a single conversation turn (I tried a few times).
  3. Lastly, one can click “Stop Generating” if the loop keeps ongoing.

BUT

Forward and Reverse Shells

F5 Labs
2 years 8 months ago
Learn how attackers use server initiated connections and other clever tricks to deliver shells to attackers, circumventing inbound firewalls and access controls.

Forward and Reverse Shells

F5 Labs
2 years 8 months ago
Learn how attackers use server initiated connections and other clever tricks to deliver shells to attackers, circumventing inbound firewalls and access controls.

Forward and Reverse Shells

F5 Labs
2 years 8 months ago
Learn how attackers use server initiated connections and other clever tricks to deliver shells to attackers, circumventing inbound firewalls and access controls.

Managed ad