Yacine Souam

Yacine Souam — Last Publications

AI vs AI: How Cascade exploited an AI agent in production

We pointed Cascade, Escape's AI pentesting engine, at a production AI agent. The agent had a guardrail built to catch prompt injection. Cascade got past it on the second try. The trick wasn't a smarter payload, just a different pretext, and the agent handed over its

Agentic Pentesting

How Escape AI Pentesting Exploited SSRF in LiteLLM

At Escape, we routinely test the AI infrastructure that teams deploy inside their cloud environments. LLM gateways, RAG pipelines, model proxies: these are services that make outbound HTTP requests by design, which makes them natural targets for SSRF. When we looked at LiteLLM, we found three confirmed SSRF sinks, a

Escape Blog Squad

Alexandra Charikova 157 articles
Antoine Carossio 34 articles
Tristan Kalos 23 articles
Sanjana Iyer 21 articles
Achraf Ait Sidi Hammou 17 articles
Gautier Ben Aïm 12 articles
Escape - Offensive Security 11 articles
Maxence Lecanu 8 articles
Gwendal Mognier 8 articles
Karim Rustom 8 articles
Nohé Hinniger-Foray 8 articles
Alexandre Tang 7 articles