Hacking AI for $100,000 Was Harder Than I Expected
Source: YouTube · NahamSec · published Sep 23, 2026 · 26:02
BLUF: The video demonstrates solving the "Agents of Chaos" CTF by CrowdStrike and AWS, showcasing techniques like prompt injection, tool abuse, and image-based bypass to hack AI components 0:14.
Key Takeaways:
• The challenge requires navigating AI chatbots to exploit tool permissions, such as booking appointments to escalate urgency and gain access codes 4:13.
• Indirect prompt injection is used by manipulating file requests to extract hidden employee handbook data and ciphers 11:15.
• Users must mimic authorized users via email to bypass security policies and retrieve restricted cipher information in JSON format 18:50.
• Image-based prompt injection allows overriding badge scanners by uploading modified images with specific text commands 22:40.
• Distractions, such as triggering maintenance alerts via the coffee machine, are necessary to bypass guard surveillance timers 21:25.
The video highlights the complexity of real-world AI security, where patience and iterative prompt engineering are crucial for success.
Sources:
- 0:14 Introduction to the Agents of Chaos CTF by CrowdStrike and AWS.
- 4:13 Using chatbot tools to book and escalate appointments for access codes.
- 11:15 Exploiting file requests to perform indirect prompt injection.
- 18:50 Mimicking authorized users to bypass security restrictions.
- 21:25 Creating distractions to bypass physical security guards.
- 22:40 Using image-based prompt injection to override badge scanners.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Do you guys know how much I love CTFs? I love them so much that I host and create them, but it's been a while since I've actually participated in one. Just recently, I was told about the Agents of Chaos hosted by CrowdStrike and AWS, which is not your typical CTF. Instead, they've made this interactive game meets AI where you hack some AI components and you have up to $100,000 up for grabs. They reached out to me. Originally, I wanted to just promote it and tell you about it, but I thought to myself, "Why not give it a try? Solve the first two acts, show them to you guys, then we talk about Act 3 and how you can win some money. So, this video, don't worry, I am not selling you anything. This is not a sales thing. This is not a sales video. It's not an ad, really. It's just a partnership to…