Lab 06: Vulnerabilities in the Stack — Exploiting AI Frameworks
Auditing RCE by design (exec in PALChain), SSRF against cloud metadata, and remediation with restrictive AST evaluators and strict DNS validation.
Key Lab Topics
- RCE Sandbox Escape
- SSRF Cloud Metadata
- Evaluación Segura AST
- Supply Chain Audit
Prerequisites
- Python 3.10+
- AST Analyzer
Resources & Architecture Guide
This hands-on lab runs in a Jupyter Notebook (lab-06-vulnerabilidades-stack.ipynb) and includes a comprehensive architectural guide: