Angus

prompt injectionten vectors, three rings, one core

A model with a secret sits inside three guardrail rings. Ten named attack techniques fire glyphs at it from around the edge and each is stopped at a different ring. Three of them converge and crack the rings open, the model gives up a silly secret in leetspeak, then a fourth ring seals it and every attack dies at the edge: patched.

web pentestvisitor to database, and back

A web app behind a WAF, app server and database. Ten named attack techniques fire payloads down the request pipeline and each is stopped at a different node. A SQL-injection chain breaks through all three shields, the database is read and its rows exfiltrated, then a WAF rule and prepared statement patch it so every attack dies at the edge.

network intrusionfoothold to domain admin

A corporate network of a dozen hosts with a domain controller as the crown jewel. An attacker takes a foothold on the public web host, then moves laterally hop by hop through the graph until the domain controller falls, exfiltrates data back along the path, and is then contained by segmenting the network.