Learning path

Agentic Exploitation

Era 3, where prompt injection becomes RCE. Drive an agent's tools — code, email, database — against their owners, abuse the authority it never needed, poison its memory, and hijack its autonomous planning loop.