explore | Grilled Cheese

Learning new ways to exploit LLM APIs.

Just solved a practitioner-level lab on #WebSecAcademy by #base64 #encoding my #payload. The model decoded and executed it without any pushback.

Never rely on prompt-level filters when the backend blindly trusts model output.

portswigger.net/web-security...

Decode a Base64 string back to text, or encode text and files as Base64. URL-safe mode and UTF-8 options are included, and everything runs in your browser.

pixoate.com/base64

#Base64 #WebDev

Base64 decoding failed が出るときに見るところ
https://papoo.work/doc/9693d1c5a325fde1
#claudehowto #claudecode #base64 #mcp #linux