TreRB/markdown-exfil-tester

PoC

Black-box test whether an LLM chatbot is vulnerable to markdown/HTML exfil (CVE-2025-32711 class). Spins up a sink, sends payloads, renders in headless Chromium, correlates via network.

view exploit source poc_in_githubauthor TreRBpublished 2026-04-20catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-32711UShigh7.5Exploit
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan