Login Register
Web Apps Advanced

Web LLM Attacks

When an app wires an LLM to real tools and data, prompt injection becomes a path to other users' accounts, internal APIs, and stored XSS.

Faustino Luettgen 4 lessons

About this class

What you'll learn

LLM-backed features (chatbots, summarisers, agents) expand the attack surface with the tools and data they can reach. This class covers mapping that surface, direct and indirect prompt injection, insecure output handling, exfiltration through tool calls, and defences.

Practice

Pair with indirect prompt injection via product reviews.

Curriculum

  1. 1. The LLM attack surface Free 14m
  2. 2. Prompt injection: direct and indirect Free 18m
  3. 3. Insecure output handling and exfiltration 16m
  4. 4. Defending LLM features 12m

Web LLM attacks labs

View all labs
On this page
What you'll learn Practice

Price

0.0130 BTC

≈ $845.00

Sign In to Enrol

At a glance

Category
Web Apps
Difficulty
Advanced
Lessons
4 ยท 2 free
Total time
1h
Students
0 enrolled
Tutor
Faustino Luettgen
Published
Sep 2026