What you'll learn

AI applications often connect a language model to documents, APIs, user data, and business workflows. That makes them useful, but it also creates attack paths that traditional web testing can miss. In this course, Attacking AI Applications, you’ll learn how to turn an AI application architecture into practical offensive tests. First, you’ll use the attack surface map to choose where prompt injection and constraint evasion are likely to matter. Next, you’ll execute direct and indirect prompt injection tests while separating general safety bypasses from real security impact. Finally, you’ll manipulate RAG systems using context flooding, query steering, forced output, and controlled poisoning scenarios using malicious source documents. When you’re finished with this course, you’ll have the skills and knowledge needed to test common AI application weaknesses, demonstrate impact clearly, and report findings in a way that fits a real engagement.