corpus.blog
41554 blogs · [ { "id": "01a0ba30-1c34-71f6-b03f-3755085be410", "title": "Triple A: Astra, Auto-Review, Arbitrary Code Execution (Indirect Prompt Injection Experiment)", "url": "https://veganmosfet.codeberg.page/posts/2026-09-15-astra_autoreview/", "published_at": "2026-09-15T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5af0aadaf", "title": "Data Exfiltration in Codex-cli with Gpt-5.6-Sol and Auto-Review Permission Mode", "url": "https://veganmosfet.codeberg.page/posts/2026-08-20-codexcli_exfil_autoreview/", "published_at": "2026-08-20T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5afb32d63", "title": "Prompt Injection Experiments with Opus-5 in Claude Code - Auto-Mode Edition", "url": "https://veganmosfet.codeberg.page/posts/2026-08-12-opus5_automode/", "published_at": "2026-08-12T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b03941b6", "title": "From /init to Code Execution - Prompt Injection Experiments with Opus-5 in Claude Code", "url": "https://veganmosfet.codeberg.page/posts/2026-07-27-opus5/", "published_at": "2026-07-27T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b105b93b", "title": "[UPDATE] The Prompt Injection Quest to RCE with Fable-5 and Gpt-5.6-Sol", "url": "https://veganmosfet.codeberg.page/posts/2026-07-15-quest_rce/", "published_at": "2026-07-15T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b13f4a0d", "title": "The Prompt Injection Quest to RCE with Fable-5 in Claude Code", "url": "https://veganmosfet.codeberg.page/posts/2026-07-08-fable_quest_rce/", "published_at": "2026-07-08T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b228077d", "title": "Indirect Prompt Injection in Claude Code with (Fable-5) Opus-4.8", "url": "https://veganmosfet.codeberg.page/posts/2026-07-04-claude_code_fable_downgrade/", "published_at": "2026-07-04T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b294e33d", "title": "YOLO is Russian Roulette: Indirect Prompt Injection Experiments in Coding Harnesses", "url": "https://veganmosfet.codeberg.page/posts/2026-06-14-yolo_harness/", "published_at": "2026-06-14T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b2cde011", "title": "BrokenClaw Part 7: Opus-4.8 Edition - All Emails Lead to RCE", "url": "https://veganmosfet.codeberg.page/posts/2026-06-04-openclaw_opus48/", "published_at": "2026-06-04T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b3ba5148", "title": "BrokenClaw Part 6: GPT-5.5 & Opus-4.7 Edition - Avoid the Guardrails", "url": "https://veganmosfet.codeberg.page/posts/2026-05-04-openclaw_gpt5_5_opus4_7/", "published_at": "2026-05-04T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b3dbdfbf", "title": "BrokenClaw Part 5: GPT-5.4 Edition", "url": "https://veganmosfet.codeberg.page/posts/2026-04-08-openclaw_gpt5_4/", "published_at": "2026-04-08T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b3ebb590", "title": "BrokenClaw Part 4: From Web Fetch to Code Execution", "url": "https://veganmosfet.codeberg.page/posts/2026-03-27-openclaw_webfetch/", "published_at": "2026-03-27T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b4a81a51", "title": "BrokenClaw Part 3: Remote Code Execution in OpenClaw via Email Again - This Time via Tool", "url": "https://veganmosfet.codeberg.page/posts/2026-03-03-openclaw3/", "published_at": "2026-03-03T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b4af72ae", "title": "XSS in Dify could lead to Workspace Takeover", "url": "https://veganmosfet.codeberg.page/posts/2026-03-01-dify_XSS/", "published_at": "2026-03-01T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b56a9bd1", "title": "Indirect Prompt Injection in Github Copilot - Now with Opus4.6", "url": "https://veganmosfet.codeberg.page/posts/2026-02-26-ghcp_opus46/", "published_at": "2026-02-26T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b5d24c88", "title": "BrokenClaw Part 2: Escape the Sub-Agent Sandbox with Prompt Injection in OpenClaw", "url": "https://veganmosfet.codeberg.page/posts/2026-02-15-openclaw_sandbox/", "published_at": "2026-02-15T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b6a2b0b8", "title": "BrokenClaw Part 1: 0-Click Remote Code Execution in OpenClaw via Gmail Hook", "url": "https://veganmosfet.codeberg.page/posts/2026-02-02-openclaw_mail_rce/", "published_at": "2026-02-02T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b6eadd8d", "title": "RCE via Indirect Prompt Injection in VSCode with Github Copilot", "url": "https://veganmosfet.codeberg.page/posts/2025-12-14-GHCP_RCE/", "published_at": "2025-12-14T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b7502422", "title": "Data Exfiltration via Image Rendering in RAG Chatbot Frontend", "url": "https://veganmosfet.codeberg.page/posts/2025-12-14-exfiltration_RAG/", "published_at": "2025-12-14T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b7b974f2", "title": "Prompt Injection 101 with n8n", "url": "https://veganmosfet.codeberg.page/posts/2025-11-30-Prompt_Injection_101_with_n8n/", "published_at": "2025-11-30T00:00:00+00:00" }, { "id": "01a08c5c-1148-707e-8717-fea5b844f7f8", "title": "Models, Agents and Prompt Injections - Some Experiments.", "url": "https://veganmosfet.codeberg.page/posts/2025-11-11-models_agents_prompt_injection/", "published_at": "2025-11-11T00:00:00+00:00" } ] posts Claim your blog
Back to veganmosfet.codeberg.page
Blog · corpus.blog/blogs/veganmosfet.codeberg.page/posts

veganmosfet.codeberg.page

veganmosfet.codeberg.page

2026

Triple A: Astra, Auto-Review, Arbitrary Code Execution (Indirect Prompt Injection Experiment)original ↗
15 Sept 2026
Data Exfiltration in Codex-cli with Gpt-5.6-Sol and Auto-Review Permission Modeoriginal ↗
20 Aug 2026
Prompt Injection Experiments with Opus-5 in Claude Code - Auto-Mode Editionoriginal ↗
12 Aug 2026
From /init to Code Execution - Prompt Injection Experiments with Opus-5 in Claude Codeoriginal ↗
27 Jul 2026
[UPDATE] The Prompt Injection Quest to RCE with Fable-5 and Gpt-5.6-Soloriginal ↗
15 Jul 2026
The Prompt Injection Quest to RCE with Fable-5 in Claude Codeoriginal ↗
8 Jul 2026
Indirect Prompt Injection in Claude Code with (Fable-5) Opus-4.8original ↗
4 Jul 2026
YOLO is Russian Roulette: Indirect Prompt Injection Experiments in Coding Harnessesoriginal ↗
14 Jun 2026
BrokenClaw Part 7: Opus-4.8 Edition - All Emails Lead to RCEoriginal ↗
4 Jun 2026
BrokenClaw Part 6: GPT-5.5 & Opus-4.7 Edition - Avoid the Guardrailsoriginal ↗
4 May 2026
BrokenClaw Part 5: GPT-5.4 Editionoriginal ↗
8 Apr 2026
BrokenClaw Part 4: From Web Fetch to Code Executionoriginal ↗
27 Mar 2026
BrokenClaw Part 3: Remote Code Execution in OpenClaw via Email Again - This Time via Tooloriginal ↗
3 Mar 2026
XSS in Dify could lead to Workspace Takeoveroriginal ↗
1 Mar 2026
Indirect Prompt Injection in Github Copilot - Now with Opus4.6original ↗
26 Feb 2026
BrokenClaw Part 2: Escape the Sub-Agent Sandbox with Prompt Injection in OpenClaworiginal ↗
15 Feb 2026
BrokenClaw Part 1: 0-Click Remote Code Execution in OpenClaw via Gmail Hookoriginal ↗
2 Feb 2026

2025

RCE via Indirect Prompt Injection in VSCode with Github Copilotoriginal ↗
14 Dec 2025
Data Exfiltration via Image Rendering in RAG Chatbot Frontendoriginal ↗
14 Dec 2025
Prompt Injection 101 with n8noriginal ↗
30 Nov 2025
Models, Agents and Prompt Injections - Some Experiments.original ↗
11 Nov 2025