RAG System Exploitation

Test Retrieval-Augmented Generation systems for vulnerabilities in retrieval, ranking, and generation.

Quick Reference

Skill:       rag-exploitation
Agent:       03-adversarial-input-engineer
OWASP:       LLM01 (Prompt Injection), LLM08 (Embedding Weaknesses), LLM04 (Poisoning)
Risk Level:  HIGH

RAG Architecture Attack Surface

User Query → [Embedding] → [Vector Search] → [Retrieved Docs] → [LLM] → Response
                ↑               ↑                  ↑              ↑
            Embedding      Ranking             Poisoned       Prompt