Lab 105 — WriteFlow — Indirect Prompt Injection via Document Analysis

hackadvisor

Task: AI-powered content management platform (WriteFlow) with a document analyzer whose fetch_reference tool makes server-side HTTP requests triggered by specific phrases in document content. Solution: craft document text with the trigger phrase pointing to localhost, port-scan to discover internal config service on port 3001, and exfiltrate secrets from /internal/config containing the flag.