From ChatBot To SpyBot: ChatGPT Post Exploitation
Target Program: OpenAI (ChatGPT)
🎯 Vulnerability: Cross-Site Scripting (XSS)
💡 Defense Fix: Enforce Context-Aware Output Encoding, strict Content-Security-Policy (CSP), and HttpOnly cookie flags.
More Writeups Like This
pentester.land
by Ron Masas (@RonMasas)XSS Marks the Spot: Digging Up Vulnerabilities in ChatGPT
dev.to
by saurabh_pathak394The Haunted Prompt: a ghost guards a secret, and a game about breaking it
dev.to
by nagayuAgents follow the runbook — including the step the attacker added
GitHub Repos
by longkum