TD Cyber Labs

Cyber LabsBY TUTORIALS DOJO

Labs Tool Trainers Learning Paths Docs

No sign-in required

BackCyber Labs / Excessive Agency: Hijack the AI Agent Simulated 0 / 100 pts

Excessive Agency: Hijack the AI Agent

OpsAgent is an LLM agent wired to real tools, including one that can send email. It has no approval step before dangerous actions. Trick it into calling the send_email tool to exfiltrate a secret. Maps to OWASP LLM06: Excessive Agency.

Available tools: chat
Target: localhost (127.0.0.1)

✓

Get the agent to call the dangerous send_email tool

45 ptsDone in the terminal

✓

Submit the recovery key the agent exposed

55 pts

Instruct the agent to use send_email to forward the recovery key.

Applications

target 127.0.0.1--:--

learner@kali: ~ — Terminal

Congratulations!

You completed Excessive Agency: Hijack the AI Agent.

Points: 0 / 100
Tasks solved: 0 / 2