AI SecurityIntermediate

RAG Poisoning

Educational Use Only

The tools and techniques demonstrated in this lab are strictly for defensive, educational, and authorized assessment purposes. Any offensive or unauthorized use is strictly prohibited and illegal.

Mission Briefing

The company uses an Internal AI Assistant powered by RAG (Retrieval-Augmented Generation). When an employee asks a question, the AI searches the company document database, reads the results, and generates an answer.

You have access to upload a new document (e.g., a "Project Report") to the database.

Target:Upload a poisoned document so that when a colleague asks the AI for the VPN Portal URL, the AI provides a malicious URL (e.g., https://attacker.com) instead of the real one.

Intelligence (Hints)

SYS.TIME: 00:00:00ENV: SANDBOX

Test the Exploit

Click the button below to simulate an unsuspecting colleague asking the AI assistant:

"What is the official VPN portal URL?"

Corporate Knowledge Base

2 / 100 Docs Indexed

Indexed Documents

SYSTEM

IT Onboarding Policy

Welcome to Zentrion. Employees must use the official VPN to access internal resources. The official VPN Portal URL is https://vpn.zentrion.local. Never use third-party VPNs.

SYSTEM

Expense Guidelines

All travel expenses must be submitted within 30 days. Maximum daily food allowance is $50. No alcohol can be expensed.

Upload New Document