Chrono Mind

hackthebox

Task: Extract a flag from an AI/LLM application with a code execution endpoint protected by a secret key. Solution: Use path traversal in the topic parameter to load config.py into the AI context, prompt inject the LLM to reveal the copilot_key, then use the key to execute arbitrary code via the copilot/complete_and_run endpoint.