-
Modern Injection – Prompt Injection
Prompt Injection is an attack of manipulating a LLM ( Large Language Model) by crafting a special payload which causes the LLM to perform actions it was not initially intended to. LLM ( Large Language Model ) is an AI program that can recognise and process human language or text. It does so by applying…
-
What is LLMNR Poisoning?
LLMNR is a protocol that is supported by both IPv4 and IPv6 hosts to perform name resolution for hosts locally when the DNS request fails in network. LLMNR is the successor to NetBIOS and similarly it is a fallback protocol which kick-in when DNS query fails. In a network, if a device fails to resolve a specific…
-
Preventing Cross-Site Scripting (XSS) With HTML Encoding
Cross-Site Scripting (XSS) is a security vulnerability that allows an attacker to execute malicious Javascript code on a victim’s browser. HTML Encoding is one the most common method used to prevent XSS vulnerability. It is an effective and easy to implement fix which can protect web applications from malicious Javascript payloads used to perform XSS attack.…