OWASP LLM08 Avanzado 60 min

Lab 05: RAG Under Attack — Vector Weaknesses and Data Poisoning

ConfusedPilot attack exploitation, ChromaDB/FAISS vector poisoning, cross-tenant data leakage, and hardened pipeline with pre-filtering and SHA-256.

Key Lab Topics

  • Data Poisoning
  • Cross-Tenant Isolation
  • ConfusedPilot
  • Firma Criptográfica SHA-256

Prerequisites

  • Python 3.10+
  • ChromaDB
  • SentenceTransformers

Resources & Architecture Guide

This hands-on lab runs in a Jupyter Notebook (lab-05-rag-ataque.ipynb) and includes a comprehensive architectural guide:

Read Architecture Guide →