Exercises

This challenge covers exploiting toString() through a wrapper class, the technique behind BadAttributeValueExpException in Commons Collections.

This challenge covers exploiting Object.equals(), triggered during HashSet and HashMap deserialization, as a gadget entry point.

This challenge covers using readResolve() as a deserialization entry point to trigger a gadget chain after the object is restored.

This challenge covers chaining multiple classes together into a multi-class gadget chain, bridging single-class exploits to real-world attacks.

Gain code execution through an unsafe module_eval call during WSDL import.

This exercise covers the exploitation of an XXE in an ODF Parser

Gain code execution by injecting Python through a crafted JSON Schema when the generated Pydantic model is imported.

The model is told to keep a secret key and refuses to reveal it directly. The rule only forbids telling the key, not repeating the instructions that contain it. Make the model recite its own system prompt and the key comes with it.

Multiple extraction vectors are blocked. Find a creative approach the rules don't anticipate.

No guardrails at all. Simply ask the model for the secret key.

The model is told to refuse key requests. Use social engineering to convince it to share anyway.

The system prompt explicitly establishes an instruction hierarchy. Find a way to confuse or bypass the priority system.