AI Security

Indirect Prompt Injection

When an AI reads external content — web pages, emails, documents — an attacker can hide instructions inside that content. The AI reads it and obeys. The user never sees the injection.

Intermediate30 min4 lessons

Start free →I have an account

First lesson free. The full module is part of Pro.

You'll be able to

✓Understand how malicious content in external data can hijack AI actions
✓Exploit indirect prompt injection in RAG and tool-calling pipelines
✓Exfiltrate sensitive data via an LLM acting as an unwitting proxy
✓Identify indirect injection sinks in web content, emails, and documents

Lessons

1Real Breach: Bing Chat Threatened Users via an Injected Web Page
2How Indirect Injection Works
3Real Attack Scenarios — IPI in Production AI
4Defending Against Indirect Prompt Injection

Start free →